last executing test programs: 35.705741479s ago: executing program 1 (id=73): mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3000009, 0x46031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) sigaltstack(&(0x7f0000000000)={0xffffffffffffffff}, &(0x7f0000000080)={&(0x7f0000000040)}) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="2c000000070a01040000000000000000020000000900020073dc797a32000000000900010073797a30000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4040}, 0x0) 35.536491974s ago: executing program 1 (id=74): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$BLKREPORTZONE(r0, 0x1261, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)=ANY=[@ANYRESHEX=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000000006c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000002040000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000500000000000000000000000a000100000000000000000008002300f8ffffff4800010073686132353600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002c0017000400000029bd700029bd700029bd700029bd70000900000009000000000000800800000001000000550003"], 0x1cc}}, 0x0) preadv(r0, &(0x7f0000000180)=[{&(0x7f0000000000)=""/46, 0x2e}, {&(0x7f0000000040)=""/80, 0x50}, {&(0x7f00000000c0)=""/166, 0xa6}], 0x3, 0x6, 0x96) 35.517379686s ago: executing program 1 (id=75): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000280)={0x1, 0x0, [{0x400000b4, 0x0, 0x1}]}) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000000240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="0c178954cd1cf6262800"]) read$FUSE(r3, &(0x7f00000093c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000080)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x2067012, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3}}, 0x50) (async) write$FUSE_INIT(r3, &(0x7f0000000080)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0x2067012, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3}}, 0x50) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000002c0)="c4e28d97d2b988020000b894e40000ba000000000f300f01ca260f01c50f01ca2e660fd83fc4e2352e4f35c7442400a4000000c7442402837f0000c7442406000000000f011c24d23fb9800000c00f3235002000000f30", 0x57}], 0x1, 0x61, &(0x7f0000000340)=[@cr4={0x1, 0x200600}, @dstype0={0x6, 0x6}], 0x2) (async) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000002c0)="c4e28d97d2b988020000b894e40000ba000000000f300f01ca260f01c50f01ca2e660fd83fc4e2352e4f35c7442400a4000000c7442402837f0000c7442406000000000f011c24d23fb9800000c00f3235002000000f30", 0x57}], 0x1, 0x61, &(0x7f0000000340)=[@cr4={0x1, 0x200600}, @dstype0={0x6, 0x6}], 0x2) syz_fuse_handle_req(r3, &(0x7f0000006380)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba5234400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b60dd7710000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e8ffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000018000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000048636662867d08f50000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x0, {0x0, 0x1d}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) (async) r5 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) ioctl$NS_GET_OWNER_UID(r5, 0xb704, 0x0) (async) ioctl$NS_GET_OWNER_UID(r5, 0xb704, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r6, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) getsockopt$bt_l2cap_L2CAP_LM(r6, 0x112, 0xe, 0x0, &(0x7f0000000040)) 35.312486474s ago: executing program 1 (id=76): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r1, &(0x7f0000000240)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x12}, @mpls={[], @ipv6=@generic={0x3, 0x6, "b9e7a9", 0x28, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, {[@dstopts={0x33, 0x3, '\x00', [@hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @generic={0xf3, 0x5, "1f69789158"}]}]}}}}, 0x5e) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000400)={'syztnl0\x00', r3, 0x29, 0x10, 0x0, 0x4, 0x43, @mcast2, @loopback={0xfec0ffff00000000, 0xffff8881114a4aa8}, 0x40, 0x8000, 0x1, 0x6}}) 35.071853056s ago: executing program 1 (id=78): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002600)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a74000000060a0b0400000000000000000200000048000480440001800a0001006d61746368000000340002800a00010071756f74610000001c0003800000004ba7906e8f58c2052fade1bc2c62cdeb7521cf85ee08000240000000000900010073797a30000000000900020073797a3200000000140000001100010000000000000000000300000a"], 0x9c}}, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) (async) r1 = syz_open_dev$video(&(0x7f0000000000), 0x7ff, 0x0) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000040)={0x1, @pix_mp={0x0, 0x0, 0x34343459}}) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x10000, 0x1c) (async) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000000)=0xa0, 0x4) (async) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r2, 0x40086602, &(0x7f0000000000)) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r3 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) mknodat$loop(r3, &(0x7f0000000200)='./file1\x00', 0x40, 0x1) (async) chdir(&(0x7f00000003c0)='./bus\x00') (async, rerun: 64) renameat2(0xffffffffffffff9c, &(0x7f0000000a00)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', 0x2) (rerun: 64) 34.812579424s ago: executing program 1 (id=80): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000100)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900c1210680320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000400b9a6080000b80000010066b87a000f00d80f300f300fc79d53bf0000c4b9e16dc30101220f01c3", 0x64}], 0x1, 0x44, 0x0, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect(r3, &(0x7f0000000100)=@vsock={0x28, 0x0, 0xffffffff, @my=0x0}, 0x80) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000300)={0x1, 0x0, [{0x7, 0x2, 0x4, 0x2, 0x2, 0x4, 0x80000000}]}) r4 = socket$unix(0x1, 0x5, 0x0) recvmsg$unix(r4, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 19.752824529s ago: executing program 32 (id=80): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000100)="d8df0f23b3b9ce000000b807000000ba000000000f301b8154fea900c1210680320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000400b9a6080000b80000010066b87a000f00d80f300f300fc79d53bf0000c4b9e16dc30101220f01c3", 0x64}], 0x1, 0x44, 0x0, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect(r3, &(0x7f0000000100)=@vsock={0x28, 0x0, 0xffffffff, @my=0x0}, 0x80) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000300)={0x1, 0x0, [{0x7, 0x2, 0x4, 0x2, 0x2, 0x4, 0x80000000}]}) r4 = socket$unix(0x1, 0x5, 0x0) recvmsg$unix(r4, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6.662320248s ago: executing program 0 (id=178): syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f010400000009058303"], 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x28, r2, 0x50dc85624ea6cf59, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x140, r2, 0xdbfa89af7de1a284, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5b}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2c}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x4}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x4}]}, @IPVS_CMD_ATTR_DAEMON={0x60, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010102}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pim6reg0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}]}, @IPVS_CMD_ATTR_DEST={0x50, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x1}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x10000}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@local}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xa}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x4}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xfd4}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x6}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'wg0\x00'}]}]}, 0x140}, 0x1, 0x0, 0x0, 0x404c810}, 0x16040) 5.205409715s ago: executing program 0 (id=183): r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0xd06, 0x10000) ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(r0, 0x40184150, &(0x7f0000000140)={0x0, &(0x7f0000000040)="798cb48a676be5d125034bb7fec96817d044250b4889fce9db4d0a2af9b0674eedbc196aabf596637f512a574ac6c23630ad30d5cd30abfcb5aa9679c6d804381dc6cd9cd2f7caab3e5925bae7307e39f81b90f24d41e18f2ea5f9a2d7dbfb23dcb7ebce65bf03fcf0f43a6bd984d4347af158be5a245d9a97ef254501b866b2ff28656bf7a51f4e62e6c77356e1caf9cd2d97f30406d8cc69658a1a712fb86368273cdd08d6f80687a288c9bdc179280693906192c93cf009920864a211fee433f9e77615ae6c6ab8e9943e659b5066a87fba9d4d0a50692f86c1d4da26c003f110eaaa4138d8ab6f0ecccae589", 0xee}) ioctl$BTRFS_IOC_SPACE_INFO(r0, 0xc0109414, &(0x7f0000000180)={0x89b, 0xffffffffffff7fff, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f000000d280)={0x0, 0x18, 0xfa00, {0x2, &(0x7f000000d240)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, &(0x7f000000d2c0)={0x5, 0x10, 0xfa00, {&(0x7f000000d040), r1}}, 0x18) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f000000d300), r2) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f000000d340), 0x400, 0x0) ioctl$PPPIOCSDEBUG(r4, 0x40047440, &(0x7f000000d380)=0x4) write$ppp(r4, &(0x7f000000d3c0)="b98581a4924887aa572c232d73af578d8b15048281a87abef0a2521cd452daf658446a36f2a5a18c2a69527c5ff23f39f114cc27f939121b1374a4a1c90650918baaf5b91ccd35db85b74103a6e4356c1a5db18647f39c53d882ebf294b71f5d4b2f0611e04f4f5df5e781bd33f68b8a14492d5aa3fabc085c36c9f2eb30ebf2d20b59a74bda0592", 0x88) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r5, 0x0, 0x2, &(0x7f000000d480)={0xffff, [0x92, 0x4], 0x8}, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f000000d640)={&(0x7f000000d4c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f000000d600)={&(0x7f000000d500)={0xd8, 0x1403, 0x20, 0x70bd27, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'vxcan1\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'wlan1\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'nicvf0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'pimreg\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'team0\x00'}}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4004014}, 0x40880) ioctl$BTRFS_IOC_LOGICAL_INO(r2, 0xc0389424, &(0x7f000000d6c0)={0x1, 0x40, '\x00', 0x1, &(0x7f000000d680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) write$RDMA_USER_CM_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f000000d700)={0xa, 0x4, 0xfa00, {r1}}, 0xc) sendfile(r2, r4, 0x0, 0x7) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f000000d780), 0xffffffffffffffff) sendmsg$IEEE802154_LIST_PHY(r6, &(0x7f000000d840)={&(0x7f000000d740)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f000000d800)={&(0x7f000000d7c0)={0x14, r7, 0x1, 0x70bd2d, 0x25dfdbfb, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) r8 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f000000d880), 0x101000, 0x0) ioctl$I2C_TIMEOUT(r8, 0x702, 0x7) fcntl$F_GET_FILE_RW_HINT(r4, 0x40d, &(0x7f000000d8c0)) ioctl$VIDIOC_G_SLICED_VBI_CAP(r8, 0xc0745645, &(0x7f000000d900)={0x5, [0x2c3b, 0x68d2, 0xe, 0x3, 0x81, 0x7, 0x518a, 0x3, 0xfffe, 0x8dc2, 0x625, 0x79, 0x400, 0x1ff, 0x6, 0xac5f, 0x1, 0x9, 0x8, 0x1, 0x83, 0x101, 0x5, 0x100, 0x9, 0x1, 0x4, 0x300, 0x1, 0x8, 0x9, 0x8, 0x5, 0x3, 0x2, 0x6, 0x3, 0x7, 0x5, 0x7, 0x3, 0x7fff, 0x6, 0x4, 0x3, 0x1, 0x7, 0xf], 0x8}) ioctl$sock_bt_hidp_HIDPCONNADD(r8, 0x400448c8, &(0x7f000000e980)={r8, r5, 0x2826, 0x1000, &(0x7f000000d980)="8c7cb0b2f3fb60f80a468dde7a70f8194ac825f93f77c8b300175c98fa8f6ae49d878603ea5d433393c2dca2993e81c8792af99e2e9e35b2e13386a0f7d16a3f83f56b8c9886f1452ad3f5e8c8459099c06a0caab167b4d8815b47a04ade7089aca0593a799fee0c6b3c2f5b0e07510b8d335f9fc754be6f65543ff3d8401892ecf5f007533860eeb0ccdeed2c4f80cb3077add9a1a03a27f7e1b14c8e8e0a547c049aaa15cdd05fbd3d669ee376cac5d7074d69a5c4e92a4d4615341004c1f3facb5d4f170dbd9f09404079ff54d6e1fb6fba56f18226e58c8b82f87db4b2167cf802791ed8d5b3cbb3b3d051f17fb96bbe65f7830e1eff3efd28abd1a95cb79de3aec06419816fc672053235b9b8b1e416502de8454f353f434de5ddf4495b05e473e106542f51abeb30880ea72e4cf00592a88cc77e1b488dc58e51710f1c10a147ea8e8bffaa0f2ab9241ba90acbb5ec9ed8a24462bd295ab3922769dcb7578eeb185b9ea7c410b62b710f81466f2f941e4d09cd8139ff1662c6301681b6c2b28c7c89310a036270961b1d4df8cb3b7552dab8810c7ed5126149a15941526641d6d7f2fff189e6e60df97ef99ab6d150c41c107c04155bdd620430fc436afdcc569f3b7288fecd91486d7feab5b0c64a27ec19d7e276b9d48826d186a11390306161cee5a0e1d228587e1545ff494a97f873fadbb958b3ca23fe88083d8a2f638aa505fd2c2fe4216d8e9906c97027eb40385677026f8303b942a8ec3776c768f8e804fc93c04163ec535398d92cdf92fe8a90065078cba6d6245a4602a22f0c040d40bb6b3937a8230cdff4f55e3228236370bc20841a1683fbb171979647669e91d3033d6c03b7382d03208327807c872a902351a8dc6c4e26017965e4f6b59709ab4d0015fbdbb8fb05b1defae1bb50ba1abee4ec37e8118eec888c7cc1a702eb60a9c63652cbfa298e31f202bc72ec883fa6d872e52e8758d8ee8346572b8a3dbbfe8870528a39700b8107d09d5d6b1df3f9e2ee520d8520ad987ca1a6b6527b2479c6924397c1b5755151d28b3d0a0202080c98c38375e70d1f997b4ee4420e41ca3a76951a68077452cd15917ccd306aef277a75fa567e935bfac33c853b574613170bafc37cb8977fcd32e581bfea6b2ae1204bc35c6a0706af5525e10c1d6365ba1c2c7e762815d9ff6e619403881b5fbba9376054f5b63cab9241e0e8877cf12be7f71f48b9b469237bac979386d723387db0519c16224c7b880cf35d8e7fbf75fd940cf55dce2fc656e9895d24d0296949a2c0690a6c14ceef9b29a6de451969f416f10d2d38f6534268607fa430c367f091055e21926be94990a78b4826e76be928109f96d91e5eb2da7578940a3d378886b45169878c38c98229d9f44ffefd455ee928a36ea664b817f8910afc31f89ba5a4e1630eb7a3b7146115fd02f492f37fd07df3e0a7d56acb1200528a46df9554f71e9903b8bccbe2e81c08a2f2edf40cbe67d568490bc10e6371542f288ad0e038ea4e3e38925d6347e38dd00b0cb448a44271af064ff9ec1e5506f81cbe6de6507cff3052642fd1eb3a0985488ea0cba5efedfb7fadd37e81193ffe7e60afeab162f1a5ecdfeae3a58097826be37ae19da4f0aefb795a1b0b7eee95cf3840a36a3050a3d0d2f562ee979ee03b63a1f2c5cd49fe62720117be8d169b669e830a9aecbe9ecf8d9aa806f253a76d306aa8ca33614215926ac618d21b6c789048567737a0103f035468727f23e10b5233633fb0561b66871a85d3e4f4b333ea352e7077142bfa22256019e3f2b4c3684a679fcd6f9500b95f2a00ea55a4db667721062855e264ed2c95554fbc5113b632208e68291b0a895a284d06100285e0400191df156ee5eab27760df96cdf5bbcd68a2ed60a0900a1e9b6d49e596dca3cf37be8b4f9148819ddd2e2c97d0339353874e57f151fd68f6ab9e1ba4f8acc3049b21238348f643e958b9d85f52158a10736769f970721fc56ba290ebc1648b2f3d3d07abf65d519f3c2828e1534feb64bf1a92452aa33e33896676b2fd9ce49a0146ba8386aaf5b4e100460a07c74d96a35353a128c24a3a323b8dc976e0ebe0bc45e055aebd9e9f5e23a751dbe17524544cd405d0d695ecdec5964f4d4b54f4f4cd491d6be95522432cb2290d1c2701263c9daf0b7e3d8a85dfbe13b51bb4f950c5c160da7e4a4907b649113c0fc48f88c19c02744016c7a20eea5af9899c3de771f7f0b654d40b840242550f00ca3f2a2a344dbbd29e02aa086adcc7c59160714905fb1744471e80b16b4cd928cf22a0b5b26cf766b24db0de81b7ddb0c8e84ba6e85aa90ec84adec8a7be96e6a1cfc202f78ccc54b7514dc90e0887dce56b485db5a83202d0820c4e3060f7ce18d4d380afb6b246573ebd912e20fe11bdd1b43b19c2988ed20f1fc46ffbfb8c3db03ff033b602337d7435fb3f4488687638470544f88d07ac2edfb2d30f355a5bcc7d61358f512818baaadc113c211322198e859c78d6a3cbf8db7563778bb0ec46bac1174880deea6de1d1424d8faca0329b13fb3c7f9919e69177336681e5865cc3832704766de91062d9d1b589cc571a07c062ad4177957e392132cb664bbcff7c97c812563d6e5adf68f6f589fa35f8afa13f5f48ddf8fe1c8efb1e9f3010f8003fb89bfcd0a4721f6a060f2740a0f128c90a94d0e49348a2009ad2cb94e2e976b4d003643269f198e4d9aa437727a360a2176672b6062fb22d5fdbfd43aa4d0d35bd55383d206cf05634c73c9a9e50925fd040fe33e3356cea29fe54916544200c2d6bc001857eae3a6868a8be90d8d162737cad461dd52d0e5a925a1378e99fb0ffb46baccd18d16f9d9573c189990a850d2beda2c754e2d2be658b0c78e13321cac71b14d7555f52286113704bed8d75449df27592cc6d27db4a15dd424386eeb423fec9d34b211e41aa476cc642a1a4d9d6c1150c4734092aad96fff1ac66dbc53383d6647444d0717f17bb3fb0cdc6b533fcac60b28692920412b1fb5c344c514bde85687ededaa2b039532a60bec29f921a461aab28687b421eebd029b3c5cb7fd5e6ac36568c5b945b67d2c95a6da48757393eedf3da3ae8aa0eb651ce95efd33810b9b1381c0927a18fa31c961331d499805ca01d5ba20ef00cbd3e0545cbc7a7b1809413eea107ae1d79b1eb0866d679894b644655f8ff4e4a8e53dac9ef40d065976b9f3b17e26f3f7ec047545931b73b2fd96702d094638c955c19b93bbf7144e085e610f3bc7748de2d1d4de36356ed24f619cf4d24ed50208adec02c47d170e9c8c7ad6b64b28b158949cbe7422aaaf8b3fdf52e7704a23944a4d6332afedacfb62446454bc1b9187f3103549bd64fcf40e9a847fc300302fa71e50f3512e7194183c8e021b0b2e4966f3088d0e4f86cfaf612412496bfb0ede4e5c616ff03577c84fa1e040f7605d7e915730cf76b65e6588858c1df18674f612280fbc4c6931e56e9d0c3e2e00665f30df538b0310fd540333ba958b288a35b4fae2da53ef37b0b236ac94f90fee6080fd99bac3bfa2394aec06d9b9106ef65bb0ccb09e27ae4481fff3c7676eeeff5f22f61f7d7944998ff171525198d8cf604aa926ed8a71f309bc90c2f01dc28bbe9fa3af255794d6f100f484edd8dff394ab8a364db6bd3308237f6e37d28f2ed523dd98def4517d7223fc5772b74b43a488052eff8c2c9229b8aa2388d3b43c9b10220cdc62fb289e2abd1583a9a4ca0fcca6fb0ada52f9212095b6c7bf08f6fb68302aaa4b387685f13f5fef2f66a842453879ab8438d1938bc88915c025191bdbb882b0c4b8c85afa8b50400226cb3ae48f7e35bdfa9b6c9086f7d1fc8351516567da7247919b0e8ede375dd3c3bb24458d4be19afeeb0e3e474fd82124666fbe1c874bfe91be4866689b51fb9b1acd38faf81587150b0ef421cd46d5b605d0a42640448d06ebf8307aa4a2dc7bc84e5c56871b089cd66a226b9a4c93524a027d94412ca79c47bd2aab919ec40e26d86b0a2ec73e98d3b1117be65c88e78089f21312db03fb2282882864071d103bbdc920e3f255ae453ee05ae05f6ebbb09947a388d1ed229cbf330ed2eceea55fd05707364ae4b16c37d9e22193767b799845f205dd5a3bffee036f6ab8c06cf509bfe5572946d7b34d3c3c580147c3f366b667e31926b418247afc12bcaa1a628c5e8ba62fbc36fd2cbfa696e1c80536f074a1f46b39cc951fec5387280193a1a254c6864c066fce2910a9e955973ac6c3b153dcc2a14a500f2077a34ad70f72c2c11e1cccb3c6e16028b75ffbbf7a3c71fe0861ae63ecad909b122343bbcbd83de05072a976626588f47ea8a5193bac97a1d76998186c900a14b7f6b2d6d91734f547e82064684e8e69cf94a18d348f147225ddde6977e3cfc7eb24f6bb8f334156a2a14a79488d22865f9fc2e60c7f5eb3e89e6d36ef3e46b032ac89383e2c0b326e811353e02c5950060ee0bf7a63ef73f63c9defbbb26d3c5ed00a737a1025128c4fbc9a8d34135d61974d47ef3218e758b44b7ac459d74993bf0f5c8b787b7be5576f45b8edd0de9e84e670d6a572ae5b58091ae4c517d9c53a30968214f3977faccebe22edb5a5932b3630f89f19d27f70d1747ce5cf58608908bc4f8d0bfc3aff50fb82dddbd7a98d737fe02b4e7b43ded1757c11dbeb88f752227aa511016c4e2f990f593e1792f42fd71d2d4da5bac2ca3b1170e4573bcc7c68d46ff224edc8f496f36ade41648017e73d38c5518c93e6b212b0b4e6f511904c97f1c81f6a3b54f36476e7f195220abcc15fe77796f73e415540bd9d2af26c3ebe5adba54af396fa1d4950b24a8f4feb7230a99f839b38afabad46f4f194d2eed642def992bd7b36c37cc3d912bb58e203f41238355743b7bd0fcc4bc178b46d73ad0b39cb4b09f9cff33a3239f32dcb1d24b01ef4c73481e27810dfa18b639bc0a6fc89e4a64cca771caf0a0b68a0bc101a5af5ad5cf70aae00e125104bfb9326025eff2998b7b937ca21fbb071d0dcbfa64363df44160513b748d7ea66378de26c79da11638b0862a8d172826acf67597b29c2f5d777ec2e1f35919ecaf5c388bf72043bf6d92a093a918e308153b73f981145f1b06a3ee7028b45e4bf57175a0ff9e37e4947ad9382e96c36f0c10a7919efc07118af31910501fa24e8edd6850f4037ea406da0b6de452c45c00ba7eb45fcb30ed31c039a176e08a90d5618f2b735f187a3ffa0fe3a071699a322077dfac4f4c77116e32a8344bf0e1966d825455ab4d98fd09c44df861bdb846eb0dcc260e3d82881f92806a37ceec32b5bf728671ea0081b24ae4bd816de923addffa02af2c68285f88cd4490dda05dc2acc353ce73569f7744ec16e42cc5d93dad54ee9a7a375137c031f13b5babfce6c453b2228cb4e99dee2e485e75cd0d70e33551ac5322a8e6fdd8a7296bcc2f1417c5d02a96fc495aac9e3c4c8ccd4fbfe529281f1750d7b560fc892f217494da3443b845c3542abed1cc2da34d3682f4742a87b4db24fbec3cf7f6e626399134bbf9a1b5c0e90a1ae9adf1c94fe44bffaf3c2a4fb0aa47b8f119b3570e8c238d007dd7aea7c036a1f6e6858c298c0e49341b808b2856e661261a310fc2839efc9f9360a3f301c648b5a0284d9e108c638380ccce1bc07c135dcf27cb11e47c31d0ba877abe77f129f4288c8fe0c2eaead9c90c7eab9e8b7c6c1f540d9bba1811120dea9bda031b9597540bd6bb922f7e02ede6d624e8911a4840", 0x3, 0xd, 0x2, 0x8000, 0x7527, 0x2, 0xd, 'syz0\x00'}) ioctl$BTRFS_IOC_BALANCE_CTL(r2, 0x40049421, 0x3) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f000000ea80)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMK(r2, &(0x7f000000ebc0)={&(0x7f000000ea40)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f000000eb80)={&(0x7f000000eac0)={0x88, r3, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x88}, 0x1, 0x0, 0x0, 0x4000004}, 0x40800) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r8, 0x6, 0x16, &(0x7f000000ec00)=[@timestamp, @window={0x3, 0x0, 0xfff7}, @mss={0x2, 0x1}], 0x3) ppoll(&(0x7f000000ec80)=[{r4}, {r4, 0x53}, {}, {r5, 0x101}, {r4}], 0x5, &(0x7f000000ecc0)={0x77359400}, &(0x7f000000ed00)={[0x9]}, 0x8) 5.1145556s ago: executing program 0 (id=184): openat$ipvs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/vs/pmtu_disc\x00', 0x2, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000005c0)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f00000004c0)=[{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000600)="171abdb5d25446463f74d3740a70f6e0249ca79eab57d2457df5837189a49908837dae500632174cac1efc0e61b9cbcde67b0070c8bb46c63d478881c92de1d95dcc82811ba3e4d049aa70572e323a9b", 0x50}], 0x1, 0x0, 0x0, 0x11}], 0x1, 0x44854) recvmsg(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)=""/88, 0x58}], 0x1}, 0x0) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x42342, 0x0) ioctl$SNDCTL_DSP_STEREO(r2, 0xc0045003, &(0x7f0000000040)) 4.700724461s ago: executing program 3 (id=188): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000440)={0x0, 0xfffffffd, 0xffdffff8, 0xffffffff, 0x7, "ff000000000000000000000000000200"}) r1 = syz_open_pts(r0, 0x2) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x13) ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0)) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x88a8ffff, &(0x7f0000000140)={0x11, 0x8100}, 0x14) (async) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x88a8ffff, &(0x7f0000000140)={0x11, 0x8100}, 0x14) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000140)=0x4) r2 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000001c0)={'veth1_to_team\x00', &(0x7f0000000740)=@ethtool_coalesce={0xe, 0x40, 0x6, 0x2, 0x80000001, 0x2, 0x3, 0x4, 0x83, 0x100, 0x4, 0x0, 0x6d, 0x1, 0x6, 0xe18, 0x6, 0x2, 0xf, 0x1, 0x7fff, 0x4, 0x7}}) (async) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000001c0)={'veth1_to_team\x00', &(0x7f0000000740)=@ethtool_coalesce={0xe, 0x40, 0x6, 0x2, 0x80000001, 0x2, 0x3, 0x4, 0x83, 0x100, 0x4, 0x0, 0x6d, 0x1, 0x6, 0xe18, 0x6, 0x2, 0xf, 0x1, 0x7fff, 0x4, 0x7}}) 4.64864171s ago: executing program 4 (id=189): r0 = syz_open_dev$video4linux(&(0x7f0000000400), 0x10800000100401, 0x0) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc040564a, &(0x7f0000000080)={0x0, 0x1, 0x1012, r1, 0x0, 0x0}) 4.596972597s ago: executing program 4 (id=190): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2d}}, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @dev={0xfe, 0x80, '\x00', 0x3b}, 0x106}, 0x1c) (async) getsockopt$inet6_int(r0, 0x29, 0x1, 0x0, &(0x7f0000000300)) 4.4754021s ago: executing program 4 (id=191): r0 = creat(&(0x7f0000000340)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xecf86c37d530498c) close(r0) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1, 0x13, r0, 0xa4c3000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000080)=""/128, 0x80, 0x2, 0x0, 0xf, 0x200, 0xfa}}, 0x120) sendto$inet6(r1, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @rand_addr, 0x8}, 0x1c) getsockopt$inet6_int(r1, 0x29, 0x10, 0x0, &(0x7f0000000040)) execve(&(0x7f0000000300)='./file0\x00', &(0x7f0000001400)={[0xfffffffffffffffd]}, 0x0) 4.348575422s ago: executing program 3 (id=192): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x400, &(0x7f0000000280)=ANY=[@ANYBLOB="ff0f4e", @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000001c0)=[{{0x0, 0x16, 0x0, 0x0, 0x0, 0x0, 0x10}}, {{&(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x40080}}], 0x2, 0x53fe0) syz_usb_connect(0x1, 0x24, &(0x7f0000000240)=ANY=[@ANYBLOB="12010002ce859b08402040b13675018203010902120001090340f20904010800ff"], &(0x7f0000003600)={0x0, 0x0, 0x31, 0x0, 0x1, [{0x0, 0x0}]}) 4.346286488s ago: executing program 4 (id=193): futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x5, 0x1, 0x0, &(0x7f0000000000)=0xffffffff, 0x5000001) r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010200000000086d0404ca00000000000109022400010400300f0904000004030000000921faff080122070009058103ff"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect(0x3, 0x555, &(0x7f00000001c0)={{0x12, 0x1, 0x110, 0x90, 0x60, 0x28, 0x10, 0x168c, 0x2, 0xca0c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x543, 0x2, 0x24, 0xa, 0x50, 0x6, [{{0x9, 0x4, 0x9b, 0xf, 0x9, 0xa, 0xc0, 0x59, 0x3, [@cdc_ecm={{0xa, 0x24, 0x6, 0x0, 0x0, 'Q}RQ '}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x8}, [@mdlm_detail={0x30, 0x24, 0x13, 0xfc, "45861fe4ae9b9c1f0c3fbc7935057982c89ce6e3e9d93af3f60d4de24a95c0cfca68f29fab57373ca14fd9ad"}, @obex={0x5, 0x24, 0x15, 0x5}]}], [{{0x9, 0x5, 0xe, 0x10, 0x8, 0x8, 0x8, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x6, 0x6}, @generic={0x4c, 0x9, "5468844ae13a77e3d6517c59323f46a8a93f4e0d3f1d66f83233eb81c595ad23973ccec5c1b6fd8ab8d265983811d69e46490a9f0bd675890ef4d26e0d2d3db251142dbe5b5d094fefd1"}]}}, {{0x9, 0x5, 0x6, 0x0, 0x10, 0x2, 0x0, 0x3, [@generic={0xc9, 0x24, "9f4f6d971ae22d84d3a4abc2dec7021d0b68f8f59563a4aa347be25c1feb862f0dc8f1b9db1bbbc73349be6b992f05d8a1e060b663f5d0fbe981aa467a34de61c2ad49accda4dbae84e396e3c24ba55bef2446582212123edb8afffe38785d5dadf311c1c978b4ae9674acfd36b5b27caf83ac56dda052e11c20068c2c78089099cc78e5ed2c152cfd67a6811673d8b24adde8a6f0abc0b50e136b35089f8a5d5551b99dfa244cacb583925b829182deb294910a666f5ae21fc6e4a56c7c15d7976b92a3d9f305"}, @generic={0xc3, 0x23, "a0dcdd9808d7d4ce7ecaf4eda6d1f14dff093593514bb5b53e2b8e98a14e050d6d0379cc96ea817bf37fdc74a822e0c4841fc1aa087b2142954597b98703c8900649f70b9322e9aab4caa8b77f21452744288c852e9e68ca3f158b649d6ff798dd2e4bde573b743723ed7d2b1c0c1149f3a81b0ade2c3a1388b62eed052bf8b8ac81be00dc17f4f239bb1f8c11deeb48dbced21c1a0a1938edea475f517b8aca7d57f48f9821ca68970feceeebf6492a05e3fa093a0ca2880311e01f731197f40a"}]}}, {{0x9, 0x5, 0xb, 0xc, 0x8, 0x9, 0x7, 0x5}}, {{0x9, 0x5, 0xb, 0x10, 0x400, 0xb, 0xc, 0xf0, [@generic={0x6f, 0x5, "837b3701851c5fa7328fb78d176ef1b9b79926b64848668610e5b77ecff290a3e13cb8a5b439ff2065057c78a08267a042c0743f29cf89329c436cdb55cc4649b56ecd9fb7ef0757fc954440d52d283f5bcdaad96cf34ac0a01e408e1517965256c93780b296899b7295b38c40"}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0xf7, 0x9}]}}, {{0x9, 0x5, 0x8, 0x3, 0x10, 0x8, 0x4, 0x6, [@generic={0xad, 0xd381402c800447e, "ad6bb4dd919ce1ce58871bfb21cce643b16c2fdd9e7185bb279aa7eff8b7b81fcdba016f374c18cf20e76c5b77dc7fc13ee7dda208c13eab1a99c6ddfb0d4e397f0dd1fd01f3fdf90292f453c8df9eb30bbd3ecb5e9c2f74603d410022f4711369696317b219c74eb4a52b66c9b8cfa15d89d276fe5679f146ed57092d47e15d7f37ddf260ef83b2c1880dfb7e35fb314d26e4990cef4f1742afe9f02c63b1dc5948c1a42cef9bccf40026"}]}}, {{0x9, 0x5, 0xc, 0x10, 0x200, 0x29, 0x5}}, {{0x9, 0x5, 0x9, 0x8, 0x8, 0xc7, 0x1, 0x9}}, {{0x9, 0x5, 0xd, 0x3, 0x40, 0x3, 0x3, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xec, 0x912}]}}, {{0x9, 0x5, 0xd, 0x10, 0x8, 0x3, 0x6b, 0x2}}]}}, {{0x9, 0x4, 0x6, 0x7f, 0x5, 0x3, 0x0, 0x0, 0xff, [@uac_as={[@as_header={0x7, 0x24, 0x1, 0x0, 0x93, 0x1}]}, @hid_hid={0x9, 0x21, 0x5, 0x3, 0x1, {0x22, 0xe6}}], [{{0x9, 0x5, 0x1, 0x3, 0x3ff, 0x5, 0x81, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xa0, 0x2}]}}, {{0x9, 0x5, 0x4, 0xc, 0x3ff, 0xae, 0x4, 0x16, [@generic={0x83, 0x21, "395a9e15f3f896e10c6a98fab9cd65053bdb215c5f6bae9e7da308baf61eb15be5f7b2b9e28dd57318c8977888a800751ab0d1894c8d81f753d6c9a2d6482e3ad7b6c4b7dcaeca79917e02dc28f0bbfa4dc482162b431f10c6e3b99669ccd4b92927b986584e10bae0dc077b0c784d5af7c582f9c0ac1d3999dd68a19caf48867f"}]}}, {{0x9, 0x5, 0x6, 0x10, 0x8, 0x7d, 0x0, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x7, 0x8}, @generic={0x53, 0x6, "b69c1db439f6980e920200d8ef249e213b643806db5096787180f7cb22d6d1afe8e24d1bd11f29d091ec1e87631511bdcfed6c4d16823f7c402915b8c5e9a5bd880371fd7ff354e85e4649ed2c35a77fd2"}]}}, {{0x9, 0x5, 0x96116fce3b5d6c92, 0xc, 0x20, 0x2, 0xb0, 0x9a, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x8, 0x1000}, @generic={0x55, 0xb, "428261748f73a714522758808aea95f0427e099deb45d822226a281a3e51c1bb060ee74401df67a2e59f7ac62bbf930f79c58cc63e98287280e8ef83ca9c0c64e2c8d42f116aba605a52d8c7edf57cf0fc4862"}]}}, {{0x9, 0x5, 0xf, 0x10, 0x40, 0xf, 0x1e}}]}}]}}]}}, &(0x7f0000000a80)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x201, 0x2c, 0x3, 0x7b, 0x40, 0x3}, 0x5, &(0x7f00000000c0)={0x5, 0xf, 0x5}, 0x8, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x437}}, {0xa9, &(0x7f0000000740)=@string={0xa9, 0x3, "0d4d0d6fe9c36700b577eb6de304af3deee8add58469442270ae9076b1f712418415cdee3d2bbae6ec6bfd7d8614e01e99056cedf677934fdf6436209112edcf017177c370d3643c3c2fda95af8336ae86c42f296738f8fc75284f472ad0d4db4cb6efb26a8a527e96904576f918736feb0847221369d81c9cd5f4786fdf3637c59d4e432e8b66bff1c4ea0bb77ee2717e1be7fdbc60a993b22f51cbeeee209c74331b57568196"}}, {0x4b, &(0x7f0000000800)=@string={0x4b, 0x3, "1f41e31a102e248cbd7400a07876d9e7a77396d07a44d78ce34cf24f36846f4303f60db79d201166f741440b732e7cbebcb11d2327c3896b06ccbdeb2ecb29899dda0326eb1ed6aa7f"}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x459}}, {0x4, &(0x7f0000000880)=@lang_id={0x4, 0x3, 0x40a}}, {0xf1, &(0x7f00000008c0)=@string={0xf1, 0x3, "1753c252715d4cfa4cdfb031eb2eaa4efb6ddc060d63de64fc7a5fc4b95cbe67b75ff38fd861089e159aa59a268abe2b9807fc6faa79bdaf2a99e382ab2976f9e990cfd2b81f7ed85cdafb3619f795a9a2af144f44013f184ff4d8da3004225ae7078ed0eb7f4bfb86c6427633f7019773b5ddc64d3321058a5c2b4c7982b415a20f4ef82dadc729edb019a702b80f700ec734803892200aa53af208057ceefedfb3319e752aed105848b6b385dd135c8f7dbc8dfc90df05e05ee03beeb79b36398d67b60e0159285b865444e1e4f1c514c67f48ef29a35e48e67e8a168e56f489a78985f44225d2cc022ec4392efa"}}, {0x7, &(0x7f00000009c0)=@string={0x7, 0x3, "f2a5eabe2a"}}, {0x7e, &(0x7f0000000a00)=@string={0x7e, 0x3, "437e0001773222af1468eeef980bf05aa4125e10aee9606a33af6cca0787c85e86f1aa48d1285596089cd04931f1054c24688ea40e329c56ebc434a6fc4976c3fff26e0b7ac8b9732f798634329bce2624158345691f8cb06b8599692708a603bbfcaa572600bc2805ee553ddc85afb56e677d57b61f469d775d3c0b"}}]}) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000180)=[@in6={0xa, 0x4e23, 0x37e, @private2={0xfc, 0x2, '\x00', 0x1}, 0x13}], 0x1c) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) r2 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) ftruncate(r2, 0x80079a0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r5, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x4498bda7e2139f55, 0x0, 0x0) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) keyctl$join(0x1, &(0x7f0000000100)={'syz', 0x2}) ioctl$KVM_RUN(r6, 0xae80, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000180)={0x1, 0x8}, 0x0) syz_io_uring_setup(0x3b48, &(0x7f0000000000)={0x0, 0xc5fa, 0x1, 0x1000001, 0xd6}, 0x0, 0x0) sendfile(r2, r2, 0x0, 0x7e78a6f1) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="d01000004300070129bd4e00fcdbdf2503"], 0x10d0}, 0x1, 0x0, 0x0, 0x84}, 0xc000) setsockopt(r1, 0x84, 0x7f, &(0x7f0000000040)="020000000d80ffff", 0x8) 4.10242831s ago: executing program 0 (id=195): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000840)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00220f000000540b4550182195f51584b3"], 0x0}, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f0000000840)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00220f000000540b4550182195f51584b3"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, &(0x7f00000002c0)={0x20, 0x16, 0x1, "c5"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) (async) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) accept4$alg(r2, 0x0, 0x0, 0x0) (async) r3 = accept4$alg(r2, 0x0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f00000021c0)=[{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000100)="a92e81d0991808e33c2330164cf023df", 0xfffffc81}], 0x1, &(0x7f0000001040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x880}], 0x1, 0x80001) recvmmsg(r3, &(0x7f0000004480)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000340)=""/249, 0xf9}, {&(0x7f0000000440)=""/84, 0x54}], 0x2}, 0xffff}], 0x1, 0x10041, 0x0) 3.043814535s ago: executing program 3 (id=198): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r2, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x5, 0x81, 0x42, @random="822ae57989a5"}, 0x10) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x20048001}, 0x20000000) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = getpgrp(0xffffffffffffffff) sendmsg$netlink(r3, &(0x7f00000047c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)={0x13a4, 0x14, 0x200, 0x70bd28, 0x25dfdbfb, "", [@nested={0x1f7, 0x97, 0x0, 0x1, [@generic="9803cf630a5c27acf23bb5ea5618c48b2da6bc62f5231dd5279918540ac4f77ed85092dc02e570f3a726313e0944565f7c086930090b3a246ca2fc0bffa0da18db34e81e2e164262a51b1e2b18ddc0845014414fa787d6feb5bb887f381cc5445eacaafd7747d22f82092bedebd57a6cc7b7168ab6319d5f87db9b39c00f6938ddba28fe5efbdc5d1ed4fc9025f07a7bcb7cd608e1c4ba9aed0e5a0052ca73bbb61c4c5f2017b652b2d9e301cb43af28b61ac0b32de13a6e1743177dcd12ee40e60c6473e0b6223572967303b8", @typed={0x8, 0x120, 0x0, 0x0, @ipv4=@rand_addr=0x64010100}, @generic="6c662ac4b0a93c5d503c5eb6237e0a25bef765e2616ca53b1f", @generic="3282afff4d83e99f01ace72cb6d4c85822057c6a7b", @typed={0xe9, 0x81, 0x0, 0x0, @binary="c4fd1112a2056316f1faf7c7b02b8326d9c7b2037bb5e3d08d3ef5ff4a1e4206c34da6e3dbcb0f0430660d72b4c283ea2a9726cd6c14d331c88b790350bee8eb793c234a05361a1dc5a3040bde844456351d29dafac6bac0bd339d411b9c6aa12a556bfe9e3f7ffe612dd4ffe48d9a5f8a6ae289942a46cfe9be7e1d86f3b02cdade33063f348a396074bfbe0fa8f07c3e8cfe4ff4d97f431de7a40d551279b7889b37d356e1aafe859dcc8a99c4a1fd75e8d6dcef538004705409dbd4672f18d2ffa2301b44e08d9e4b5366c95b8131521af31210dc760f443f3b79d2acec820ada257854"}, @nested={0x4, 0x13f}]}, @nested={0x118e, 0x140, 0x0, 0x1, [@nested={0x4, 0x89}, @typed={0x8, 0xe7, 0x0, 0x0, @pid=r4}, @typed={0x26, 0x1f, 0x0, 0x0, @binary="d4b7b1ca7263262f64d4df880a6b51822d678ad7c93b802303416359688373181ff8"}, @nested={0x4, 0x48}, @generic="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", @generic="932c755f7f9d60ea68b17d898acdf7af8500494ec0ce5ce38848d45f32fc3049e28bf421116b92b6d5b3e357e14c8859257492d864b03810ad57dee3f858de174a05bd74b9a52de6802421140a270c9418ed983a8cc9dd16357ccb91f49a42d47f65ce76b9d0976a270cf787b29c8f1516d99d984229fd26116e4cc8be102eda23aba8a27c2b79cb7fb7fb", @generic="7bf495d7cbb2e6c658df7a8fb41cdbc7c62463db5632a6ccc461a519758f91e3b1e0c96030b9521a9cc4210b64d0d32afd72fb5a11d85bc176009a25bb836b9ab877308a812476ac4daf43b580d2fd7c362db4b516d1217755824ac0f3329e02e435941f581450140499e015a6b815a0f46085fec6664a3a033bde209d3ad9520458328dcf529e951eb8d58a95db56ce75dc8ca15b2b2c98391d8badffd6220c1fc0518921a21a216f85e1e06baf4630d4a34df66f8dcd677f45a767beb022515b422d1279288d"]}, @generic="5c8ced2f9944e84d3f"]}, 0x13a4}, {&(0x7f0000001600)={0x238, 0x3c, 0x10, 0x70bd2b, 0x25dfdbff, "", [@nested={0x225, 0x111, 0x0, 0x1, [@typed={0xee, 0x6a, 0x0, 0x0, @binary="d941ed49480e095ed4c0007e764261705c906ba8b413ebbe88046637ccf5d81cf006443a3c1b2ac2c252264098a2ecbbe5adf9d86d874de8b9041d2c222b644ecd04fb950b67737c333a795259fffd02466da50ac31cb20414e555b16c4d139419c0cd421fe4727571be68e7bfb875353e736577e15344946e3b949e75fc18b3672e0f81774a9149aa6e54d83340ebf24fe5186010d31e30e28cc8069f4d3070211eefc4fcf410bf64828550e42a6491c7cbb682aea168c3a03df6d42276117ed2bb73fcdcef6fa371f9c5ed87e09e4e98942a839cb59a8d360d0e71fc2f14b9b64d30c5718d27ef6d2a"}, @generic="91b9a0e72541bbf5a87580af9249db54815f621817b9b1d0359591ace8461f8cffe468f9de61fba198618ade95abbe2c01502bae", @typed={0x8, 0x10, 0x0, 0x0, @pid=r4}, @generic="c75a047c2466aa103883a4be28b39133f58a362f96f8a1e360ee24cb768aa13f3f2e1901d132d38eb21e22356b2f26f70936bbb11a1212668824aaa47f23e845a32fc3d904ace0c3da05119e62eaddae566cc9fd0b9f0f21d337d2c9c8f9a8d4136d211aa18777f66cc54d624f8ec489350103031d88ea0e24a3bf20d4f9901469d3b59789eac5400a49dd6cabe334a02f29ea78fa0f0097afb9ac0e77540e7c3ef6108fe4a55d6b332aee629f5f2957f6b863a6488e87dd1490d85a5085c2174892884cefda1d4306e3d8e9748a72372b8376dcfff539b19905a3b0be5a45cb2bf9c3310999b95529e98bd29893224949e1ad7a31"]}]}, 0x238}, {&(0x7f0000000140)={0x10, 0x3d, 0x0, 0x70bd2b, 0x25dfdbff}, 0x10}], 0x3, 0x0, 0x0, 0x4000}, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r7, 0xeb) connect$inet(r7, &(0x7f0000000240)={0x2, 0x4e22, @remote}, 0x10) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@private=0xa010101, @in=@loopback, 0x0, 0x20, 0x2001, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x400000000, 0x3, 0x0, 0xffffffffffffffff, 0x40000, 0xffffffff}, {}, 0x0, 0x4}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffffff, 0x6c}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x3507, 0x0, 0x3, 0x0, 0xe, 0x4000000, 0x3}}, 0xe8) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x1) ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4400ae8f, &(0x7f0000000140)=@x86={0xb, 0x0, 0x5, 0x0, 0x5, 0x7f, 0x7f, 0x6, 0x8, 0x77, 0x5, 0x2, 0x0, 0xd, 0xd1, 0x7, 0x2, 0x6, 0xcb, '\x00', 0x5, 0x8}) ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000300)={0x2, 0x0, @ioapic={0xeeee0000, 0xb, 0xba1, 0x8c5f, 0x0, [{0x46, 0x8, 0x1}, {0x2, 0x29, 0x6, '\x00', 0xf8}, {0x60, 0x3, 0x0, '\x00', 0xbd}, {0x7, 0x4, 0x9, '\x00', 0xd}, {0x5, 0x4, 0x8, '\x00', 0x5}, {0x3, 0x40, 0x71, '\x00', 0x2}, {0x7, 0x7, 0xfd, '\x00', 0x34}, {0x9, 0xc5, 0x1, '\x00', 0x5}, {0x7, 0xfb, 0x3, '\x00', 0x2}, {0xfe, 0x1, 0xd, '\x00', 0x4}, {0x1, 0x4e, 0x0, '\x00', 0x2}, {0x9, 0x2, 0x5, '\x00', 0x3}, {0xfa, 0x0, 0x8, '\x00', 0x7}, {0x80, 0x2, 0x80, '\x00', 0x4}, {0x6, 0x8, 0x3, '\x00', 0x4}, {0x9, 0xf1, 0x8, '\x00', 0x4}, {0x2, 0x7, 0x8, '\x00', 0x3}, {0x4, 0x6, 0x9, '\x00', 0x48}, {0x90, 0x0, 0x81, '\x00', 0x6}, {0xb, 0xff, 0x5}, {0x0, 0x4, 0x3, '\x00', 0x6a}, {0x7, 0x35, 0x7a, '\x00', 0x8}, {0x4, 0x7, 0x5, '\x00', 0xf}, {0x8, 0x2, 0x62, '\x00', 0x1}]}}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="2c63616368653d667363616368652c63616368657461673d14"]) 2.644575614s ago: executing program 3 (id=202): r0 = syz_usb_connect$uac1(0x2, 0xb8, &(0x7f0000000100)=ANY=[@ANYBLOB="12010103000000106b1d01014000010203010902a600030156c0020904000000010100000a24010101bb02010211240601040507000a0008000300020005052405060f0f2406020504020002200a000a00040c24020203020250800009010d2406050203078887000a00000924030101010505"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2000000000000046}) syz_usb_connect$printer(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x8, 0x40, 0x5, [{{0x9, 0x4, 0x0, 0xf8, 0x2, 0x7, 0x1, 0x3, 0x7f, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x4, 0x32, 0x2}}, [{{0x9, 0x5, 0x82, 0x2, 0x8, 0x7, 0x3, 0x1}}]}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x200, 0x7f, 0xc, 0x7, 0x8, 0x81}, 0x2e, &(0x7f00000001c0)={0x5, 0xf, 0x2e, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x5, 0x2, 0x1, 0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "c0c0d0f9b5e6d4501f9dd37e0405e7ff"}, @wireless={0xb, 0x10, 0x1, 0x4, 0x88, 0x6, 0xe, 0x0, 0xd}, @ptm_cap={0x3}]}, 0x3, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x40d}}, {0xf1, &(0x7f00000005c0)=@string={0xf1, 0x3, "3740be96fc1d0df5bcc8a3a325889ffbbc9545acf4d9f3a0585615debd618ea985180834f3225f829e26a7ca05b3b740505895606644405ec3ff8190749db5952e119fcb104aaf4cf18d15fb85a666b27b0b71accd2fe9d3250b1e9e5d026a81906b073778378f792deab10f3f27e3c72d770fa50781d0de09797d4f7515e44d3d7532263604f9b7482ba281ba9031d188f38edee471080a6426e6176dba8858601f50ca2ce2c0f3dbcce2adc84cbbe7e6605debad94cb4030df405acae4be6d0ed694d95226965380de4c0686cc96960d1fde5b1a0436ad037d04d7587fc64f1506af269999ebc305298c4637f130"}}, {0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x42b}}]}) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000380)={0x20, 0xe, 0x1, '6'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000540)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x20, 0x83, 0x2, "5ed4"}, 0x0, 0x0}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) syz_usb_connect$uac1(0x2, 0xac, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000406b1d010140000102030109029a00030100007f0904000000010100000a24010000000201020c24020000000000000000000c24020400000000001000000d2407000000004336d88b1a560904010000010200000904010101010200000905010940000000000725018000000209040200000102"], 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r3, @ANYBLOB="08002600851600000a00180000000000000000001c005a80180001801400"], 0x4c}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000c80)={0x84, &(0x7f0000000040)=ANY=[@ANYBLOB="400702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.635999841s ago: executing program 2 (id=203): mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@verity_on}]}) (async) chdir(&(0x7f00000000c0)='./bus\x00') (async) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x88100, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f0000001280)=[{&(0x7f0000001180)="83", 0x1}], 0x1, 0x1000000000000000) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) write$UHID_INPUT(r6, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) (async) r7 = syz_init_net_socket$ax25(0x3, 0x3, 0xf0) setsockopt$ax25_int(r7, 0x101, 0xc, &(0x7f0000000040)=0x371, 0x4) (async) ioctl$AUTOFS_DEV_IOCTL_READY(r6, 0xc0189376, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r7, {0x4}}, './file0\x00'}) (async) vmsplice(r4, &(0x7f00000005c0)=[{&(0x7f0000000180)="04", 0x1}], 0x1, 0x6) (async) ioctl$VIDIOC_EXPBUF(0xffffffffffffffff, 0xc0405610, &(0x7f0000000240)={0x7, 0x4, 0x2, 0x4880, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000140)={{0x1, 0x1, 0x18, r8, {0x5}}, './bus/file0\x00'}) (async) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r9 = creat(&(0x7f0000000580)='./file1\x00', 0x0) (async) r10 = fanotify_init(0xf00, 0x1) fanotify_mark(r10, 0x105, 0x40009975, r9, 0x0) r11 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r11, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) (async) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r11, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) (async) bind$inet6(r11, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r11, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f0000000280)=[{&(0x7f0000001680)='\t', 0x1}, {&(0x7f00000003c0)="9b3effad5560d0b849c9eebae4945ce3a16a2290e0cd8347806500fa9489a5fc2994cc4b8245774e5a3922c0cd050115d28c812089960187af5eae786eede116ab1d8220919d7190a8ece23601a7e6a6bb45b8e28e04db08849b1691e986e5abaf6b9f3341e7e780398947cd94f962562d9e6b908d395dc02d7c74a9e744103e90ccd9264381f74c25979ce10bbc4cfbdbaccc4b7c2cfd3d4adc06d425a80138c4522e3d4cb8d5de1b82d34c78c58b62bcc5c49732e3c1b7f54340d9dee0be6b776ba3840ff628ec121a5c1a7d3d30c443ac7bd0a57cb437", 0xd8}], 0x2}}], 0x1, 0x0) (async) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r11, 0x84, 0x77, &(0x7f0000000300)=ANY=[@ANYRES32=0x0, @ANYBLOB="050001004202"], 0xa) 2.57133926s ago: executing program 2 (id=204): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40442, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x200000, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x2010008, 0x4, 0x0, 0x0, 0x90c}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000004280)="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", 0x2000, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x130, 0x0, 0x80000007a4552d3, {0x5, 0xfffffffe, 0x0, '\x00', {0x7ff, 0xfffffffe, 0x10, 0x0, 0x0, r2, 0x2000, '\x00', 0x4, 0xfffffffffffffffc, 0xeffd, 0x358, {0xfffffffffffffffa}, {0x100000000, 0x7fff}, {0x7, 0x8}, {0xa}, 0x8, 0x9, 0x200201, 0x7}}}}) statx(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x100, 0x801, 0x0) syz_usbip_server_init(0x1) 1.852053582s ago: executing program 2 (id=205): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) (async) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000000fc0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="1a46339a22bd8c9a91334d31ca21b471252882101882f98cf04a3e59cba597b61aa2ab6320a39920bd4c", 0x2a}], 0x1, 0x0, 0x0, 0x10004814}}], 0x1, 0x480d0) (async) recvmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x60) (async) syz_usb_connect(0x2, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100004ea208105d0502905e230102030109021200010000000009a50000002484b4009689de23ffcecef5f6f11bb3274e50b55006cf80503ce34b970059c41d368a"], 0x0) 1.1745089s ago: executing program 4 (id=206): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x8882) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000000100)=@v={0x93, 0x0, 0xa0}) (async) r1 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r1, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000000)='ex:\x88\xfe\xf7\x01') 970.843877ms ago: executing program 4 (id=207): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000004200)=ANY=[@ANYBLOB="12010000e2793f10d10501200002000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000000100)={0x14, 0x0, 0x0}, &(0x7f00000003c0)={0x44, &(0x7f0000000540)={0x40, 0x14, 0x80, "53384fa5484e893d00afc80518941a187cd4c9d72884a261d44bb6f5481a9c7906d0c29473c0e9627393a31fb650178f156be3661901e367d72be6bee806c6a6af61eebe593ad7a0ce0dbb7427ec696b4fe2dd0683655d5ee66fa41bbebccff2fd27aec6a2f2cd5a958d54f6f50570fd171c16785ac939f2093f7e9c6bc03cea"}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x84, 0x1, '\x00'}, 0x0}) (async) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="11010000733336088dee1edb236100c7000109022d0101100000e90904030003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) (async) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) syz_usb_control_io$lan78xx(r1, &(0x7f0000000140)={0x14, &(0x7f0000000000)={0x40, 0xd, 0x4d, {0x4d, 0x31, "033ec63f6c56fabf84ea448ad9aba8ad1941bcb99ec453c3ca87a0bac93d29a9f35e9513ebe48eaef3a9912c3a33945d3ae7b755b922c5cf732f7c51e029a2f296665a9168a8b71de42622"}}, &(0x7f0000000080)={0x0, 0x3, 0x56, @string={0x56, 0x3, "0e2edbaa644af3d37ffeb7eedd99d785e213af9a9197595fc89ae032c5bce218cef5534cf0d6d366bd089e7961726b9ece518c54f0aad1f5cd9038911a420aaf78c4e597c74cddc8cec841332a6deb840f73f549"}}}, &(0x7f0000000440)={0x34, &(0x7f0000000180)={0x20, 0x1, 0x8e, "00f839cb1f7d800e17dd9efcd969f35ac5925f0e0ca9a74c147b1bd170f0eec7df25e6b9eaf8fa0cd9816f05331ce8d6b31761aad33a486c5b8e046db166702fa25889155629f0940e6b02cd71e25194e1a1bdde4f33d6a11b48b539c403ddf6b5661ac456aede6181627fd701b52a1cdf931bd61da1a48c15ddefc5cdf3841950f7d37893afe265add4da3e2fed"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x10}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x8}, &(0x7f00000002c0)={0xc0, 0xa1, 0x4, 0x3ff}, &(0x7f0000000300)={0x40, 0xa0, 0x4, 0x3}, &(0x7f0000000380)={0xc0, 0xa2, 0x2f, "31100c230598802ca5f04a1e200818aa57349d91ad58ac145659adf1b62dfc193882a5a132459ad91bbaece5473862"}}) 696.247882ms ago: executing program 0 (id=208): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0xd8}}, 0x0) 673.897ms ago: executing program 3 (id=209): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000000)=[{{0x2, 0x0, 0x1, 0x1}, {0x2}}, {{0x0, 0x1, 0x1}, {0x3, 0x1, 0x0, 0x1}}, {{0x2, 0x1, 0x1}, {0x4}}, {{0x0, 0x1}, {0x0, 0x0, 0x1}}, {{0x3, 0x0, 0x1}, {0x0, 0x1, 0x1}}], 0x28) openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x200000, 0x29c) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r3 = dup2(r2, r2) read$FUSE(r3, &(0x7f0000004d80)={0x2020}, 0x2020) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r4, 0x6, 0x6, &(0x7f0000001240)=0x6, 0x4) getsockopt$inet_tcp_int(r4, 0x6, 0x6, 0x0, 0x0) mkdirat(r3, &(0x7f0000000300)='./file0\x00', 0x1a9) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@aname={'aname', 0x3d, '0'}}]}}) r7 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r7, 0x0, 0x61, 0x0, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000100)={0x0, 0x7, 0x8}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r7, 0x84, 0x18, &(0x7f0000000180)={r8, 0x9}, &(0x7f00000001c0)=0x8) sendmmsg(0xffffffffffffffff, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080003, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7, 0x4}, 0x80, 0x0, 0x0, 0x0, 0x108}}], 0x1, 0xc040) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000161401"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000800) 645.787613ms ago: executing program 0 (id=210): r0 = add_key(&(0x7f0000000240)='rxrpc_s\x00', &(0x7f0000000280)={'syz', 0x3}, &(0x7f0000000380)="32a4c58269028c155db750ac4dc972b250b358ed24ac24120da65cbd5c9e89ff77aca905e9b2f158e9415b9682e7a7091b6dfa7a0d1a369d450738b4b61f00ceebb12e5a07c48d0094de1c46417ff5f315aeb87638a6542d065d688b8a5abba73d6e9984ddc3c2175a3556b949f4457d79aff80d89656be991cbdcb3875b7c042eeb78eb8f9248543d6c8453f4802efa893ec5dceef7b7c1e944246d4d2ac9abc8f22f78b5580dee9c9bd10cee0798e1a1a6d7b50459647ace797e0a907e414e5ebd188c2f5a32b266233c61addb60f56fb0dcdd7e1cd4c5385dcd1360ffad41fa9ba8a7d1e8748409c0f779469505049103c0b884e258d703febb5e5efda3bd269ff0404ab2cef862fc76fc45f96f9cfc3fa665c79ec816118c2744eb56551ef6824e8e8535d2223ce6197a27717478bfe496529b31981ed8991dbcd8636a906da5dcb6d469c0f05320358db603b284452b6c7e7c455e207ed7483048ffd7a067c60247f622ce00f9598ad052a2170743f7bed1e43a788f76b1907d1a5b05d8b0bc31c9b77656d980b9a7246fb521a55875a2ede845cebfca67dd4d1f3c0d86540e6161348629b398137e36660186f95975ca157226b1f118acf862e9ffb1bfb706745ccca8f30036bbac6ae3404f635ef5c76f1eeef90bc35a4b7d2c77653049ea3b03e70e66db8dd200ca682280466117f2569b68193d4b662e2b3c50e66d17626324f1f31cf2e125436593a810d93344aca12ba76820aba7daa50d17402e9f419f00b81a4f7474732237674362ec15c3130031feb810c29d5b06a9c282269e02adf14be3724aff63aba861cfec08d9f2c7efb3eeaaab0960449d1b98fce4290baed581095abbd7ce8395fabab12853bfb327f41a34dca65617e66fdca18eb4ecfda884d69261d1d1471264c2652045aa363ee3ee139be0b96e5d4470840c5687cfa9b17545629ee7ae1fcc142f23340c849a0788b42f11019f099021a8c367f2faa8d9353e0c276f6641572e7d2b6fb013fdc1389285cc136e33c55f457e4ed7e056016743367748ae40fd5a72ef6e0fc629fa9fd0501fb23f4ef431cd48389090a8aea856b5d81c721d33d5318813ef17687e566dea6b602fd3e4d5f76f974bd1dcfb5d59ce44e80887816d0cb0de7c1e1d1d8ce088d14287833615855c88bd6be5e8a582c2d0b916a19baec713295fbb31d3a3ba7648bbc20aa5048d12a8c93311a281e60da7805c8a968b35f824cf70767449206c48ff136eec4fd9a8aaa24e395cc63c71c3c0d03f57e35460734a3e99da1cf46afbee8d1f76cf53d3c522610ba8a4de67bb16472561f7f5c938c3064cef0f96c43ae618f61ea3b596e937547abcd688ae899bd2f1aba729ecbb26c4dee251c4b4bdb8ec809d5c072de7a079cb741811123e7337dde9e7059ef3f1c4c89ccf260e9e5595cd7c0be1c6fdd070fab0245269639ee8a54f7a2b26be03a503ce609a6f62d17e5b1ce494e98f884ce4107156a4a618ca1214333855645fbbf0caf5681d288f6535ffe79e569a1980052c84686e5ad20cf0a6b65be6737a14064e02e3cd28ffe553f2821cdf758c84ac25ef969c9b8b2156b3b6dec157546b5eb80aa292b581266aa1d7b9d539c4d02990c4be95e06b367bb24e3cef6bbea37f3815d7ff0e1ec67901da09f263203b8a7c4c67f4cea796efef63d72cc58d1214fa524fe8c700b363be5ddc1ed5e79987564acb6d93be7c12b1d0cb08569d5e4895f1b22f04a08241cd4c36ded9b8cf49b475b3958505cb5142037d4cd71edf5dba88b3f1cbacd07c4e6df45c25c39b763ee232c5f64d7461e2ac2f15d3816a77836554636a03a778c7f83e9219b8ab7e380c6cc2dec812d58a9a100399a3860e1ca3f723b7144c907259b2872c45b6bc570e2ce065d6d0639071d60c6560437ba5fcd488209a21002173ff94760423c3aea5b7bbea9b1c1828230a30ce8df5020392da02fcca5f052baa25750d283067bc12d8e77abd09a7d8ad87985158e2eeb6714d90d767ee6c9037aac4add6a38b25bad7a8b925c06128c8ee32521e520e2d37c3afb091b23bf37d7680f6f99fb496e15ff668238a4aeef35501ed465d0ed176b6146da62d69628b7975aba4d7ba0fd26275f0d4dfd92422aca9281851a966a8dfae841325412095d6426f3929870199ef6f0813d2327443372c1f2c0f8a86d4a66cab0e4493049742184d27fc274e0c13ddff3df45320f1e4fab9de968ed0fdc12a7acb49b03291c8f7a4136efa262db53596eff2357777f7a678f10e528b7e1cca35faa44c6e7138d3dcd55bf39ff76638260840707b4c9abe971c07f12349151a8c69f739fdbd0d99b81b7105745a36801ac7dd733964ff8ad4c819fb5c242f0176e0f3088e760422b1d15e0e721edfa862e3579423ec1d1e3fc1ddf28d088800a89f78b2e344a864bfd6cb77fec4d45e3bd1e765f2d23ecdd5615757be397315788e8d2b21a8c88fc5be6feed28f0c967fa321dfb79f7ae4344e240fcfe7d17194b64ee1b42d1510ca64a2cef6cd9dae561a0215a4f8c29cd0814d23d95181b670bb76908f50610d14b8b365d451423a2a2821f564d0a099b6ac709118013b177e817ec2a056d0bdb388274a0383924630451c8bb3afdea01683702982da1f81e2676c41a36bd31d6914674c35bd431318a95c86f99d870b55464dde58f35bd13bce810768badfb476429a40fe900bf4e39f3e81d40dc1a63c3f298da96b7dee95665750ccebec2ccf8a84700a880495d84743837964826a82f54c030b46a7ff4284e479082380942362848c9745c4739bc4b8a1d6ee7577f1b4d9ce0ad9c6d1299bd6120f17474cf606c813699720eed2813666d9a94119e8a7ac255f201fe3fe6e10b216626327bbd8da49caa78f8b96541877a9a260672e1c73d006b97d4e3f0856f6931a79b8956f35e4053948eadafa056583e4514f5371c684dc8b65afe057918381dd464b3e8d667f637a772bec5d5ba3e44d00f8d605318df3e332175a56863d218af24dd93f0a72c2714a2794b499e084da98f349789eed21dc29ef215c3d611d3cb6d433516e9cea6bd15a0e3022a1f94db499920dd06b3dc0bb85bf2c5071129c0565baab3a4fba5ea114dd889ccec8c491651edddd0fef26533a907c93b1f4b2385f40dde8ecfb727ece0882f460c6a3e117b02b54a8d5ac6051dc92feb65ee3872e9262ba4d284159e198070e10770fa21b1410022538999897cec68ac5dcdecbf2eb46b61e443ec882c75602339e3481a3e999ca685153a7372b0f07fcbc52061f3df9947194db17b91f266e48c8d2e84e19edc7f31e784ec1796825270e4b74170dc3609914e821e55302364922fcc27a9a629d366635eb0be23a3e0fd1fa5dca5d78d3285a919189315d6b2b35e326c2ce2763e4c44328bae20b452931e6e8acabfcde723f631654184352a131bdd56c80a3e3869d26834fdc8df2c2f8c90b6721b957d3eed007eccbdcb70420f03c1be92bd4bc29d9e0847c49c93f3a9ce1fb79852a12cc333a6be4ec028c4f7cbd8da68dbc41e05743ba9d898a5d1aa657585a4b6b5339e0a043f11b14d2c3208ac46dbbf063b8a62fef48f057dbfb633b71a699810cad3d2e71de1149032a5f484de7384ac264ec3e0b07accf0b571ec9a4066e2561ae16c643fce3b0ddea31c9f8d316c79e4a5bac4154f6397d60101edf55e200308b3f662142b0ceffd04f655cbfb9e9bfb934cc1f5363b44dab86247e5275ab68def6c1825ffab1e8b131618be7d049dae1d8dfd1928753fe46ae9bbb32030b681e0c2e02b4e870c80d82353b1e7181bafda513f6aba9c7d37f770913fae722460114526fad3730d710f9c2e16c53474bb621e761425219d98e123e165bf49d962e73017538162a4e1ad28f2b7317734beef6225cc7214d20c80550f1df1429a7adb1b251eabf2b84abce3fe9652ab6a813f566606f418c276ec985446fa70aabc259bb0d78e5bf209f8dc85a4f83a870330177beed72c23eb662be882bd0244534e3ba468efb0c96ae383579cf5b16fa0e0e67a3d6fa990fc1715f5b5a8d64f0e0a43d45486206b08d022b32ef570739ca24d734e7cc75aadd9b4251a375d72efe82b79376559753822c290d171cddfdbb852eec9166f66d3ab8509f847c41deb5f991fef700d01cd02ffdb5a8f9f72ae16ccea76ada0f7e13829a42fe7e0a95a31f8a66f9e2f2ead041f1a476971e897cec1f34aaec4601d16dc31f5a407ba2dd48aa18beae7d4fbcb4d50c3dbfd862d9572de3807e3f5b34027f3a28528ab2af044a3a9f1ac37fdd9e71d194c29ac7cd30018ededd82244db73660a3bdfea4791ae1323c2745ac18abe56f6f43643485a2dd37564224f9bc818841df7a9575a36d6c5caaf0ff11ba73f06415e812049d779e57cf1859263c05908fc43aae4fdbaf5159beeacd5d2f4b36cc164bf11d970f948635a03d0213c974d2cb7164b576f895b54631d09f0a25e92a89ee383c1a3c8ebe404561ee714bd1307b3c7e8c1482c82acf4244e09f03b024b64c1b8c39613ae5f5317e302cef0e5297a9298369488e105738d9dfcd79df59fbe73ec4c96f3fddcaae309e70f4bf43192200fc7f3d6f7f2f5cd4f83233f8abf0a31a5d7abc193ca012adc4fd587007104928f66f0859e2ccf0464ddd693e9daba90d8857c2fbf6e466ed42f6e7b26cb9b7099bdb20a0aec50eb5921d1099a2b4ea08b5c6607c24845600d4bf56c240630dd993a78618164e80903fcc4bacfc5853c6846cc6c9347ef810c8170b65cf793f8fc0b64fc98817fb9d05f57ceff6ba7ae3c244420fc19b4a123c26b590a57420f6b376521c0c6bf5c0dc90db23c45574e197b6eeb78328086f8602c8ad14fbae336d20d4831cba4cdc0f27a7c4a08b92368d9a7c259e2569510552fe5f0bb11a3dfb3077a78347fce10b335821feaa9ee3f4a7407d76ddcde3b67b10ca83cfd3153d468003b5336101b3cb9a01d760f71fbb82ad2900e625ca0fb083d27d273281cf560bbb113d702f7df3fb0d1900087309633dafc3bcdb6f5acf78ac3c1cb63fb0a7e229f5d9d750bd84e88b2904d8418588fb544a9a0c1086ffe030f3e32f8de5fe70793ad202a5bc889463ff003b6fb3ead56a98948ddbc4424c86d44ee3057688b601694e4177ee6789ddfa9213075cf1b8dda7659a1feabc2bdd93b3b91f5cdd26744ce8e1f72ae70c24ffe8d8557b56548a734e90ee7c5e191d033febea8505234b6273281a2afaf22dc3fd0db3d1e5be2c533513731915b83789db3ae2123cecd5e389f2c6815188cb7556a337d40ac4fddd2385fff5d5a82aed6f0e5459ec3cf6c3a8ae6deddc643a5471070f3079d43e43fb945073fe9cca7d13df83343e4ad8f9432a06691360a788ca42bebb3191f0b042bba05b6c024ea4c22a8bdd51f24e07fb95bb3cd3afd1a8245a7b0920e7bff3a30975c1b2442ca54b04d4c0c2f77b84a76f0442baf88c2097fe8c07a217ad194d7fc6a315f99b74492832dfbb43b73689dbdab92e80e9327e5c6b5d3884ade5cf3c846ed519f596b19bafe37c9166a3b61a2c3cfb55ce917ebc6ee5bd594af9a2e8b5b681a94d870dc26cfc026e6bd8f4dfd0bbc80a157556056f564bce58c95a84f032355fc2a6038ccd6920ae46444ed219689505aef103bffd27544cad702e9b2eed36e12e40964d56ae2727d169d2e3618fd1f86c806251a50a48a3c01ecc18356fb589793502a5753005fdf1f890d8a3781bc33d560f4a6c1eb063e9fd6295305968726b59", 0x1000, 0x0) add_key$fscrypt_v1(&(0x7f0000000140), &(0x7f0000000180)={'fscrypt:', @desc4}, &(0x7f00000001c0)={0x0, "a935491236751e0cb0ea5cb552b344dd2f11d146be0344605a5352b0ac5e62950f22580b97f6cc91b1a278833ea06074ec2e9a11b22643c95af94740b1e18b11", 0x36}, 0x48, r0) r1 = syz_open_dev$video(&(0x7f0000000100), 0x4000000000000003, 0x0) ioctl$VIDIOC_S_FMT(r1, 0xc0d05640, &(0x7f00000002c0)={0x9}) ioctl$VIDIOC_S_TUNER(0xffffffffffffffff, 0x4054561e, &(0x7f00000000c0)={0x10001, "e6f97059e42a105d90dd10aa26d665ce8416a49a9bbced33ecd8b0d0220f960a", 0x5, 0x20, 0xfffffff8, 0x2, 0x4, 0x2, 0x1, 0x7ff}) r2 = gettid() r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFLAGS(r3, 0x800452d2, 0x0) process_vm_writev(r2, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f00000002c0)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000080)=0x0) socket$netlink(0x10, 0x3, 0x15) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4008050) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a320000000008000440040000000900010073797a30000000000800034000000007"], 0x64}, 0x1, 0x0, 0x0, 0xc000}, 0x4c004) r6 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x8380, 0x1850, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x60, 0xb1, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xc}}}}}]}}]}}, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) ioctl$KVM_CREATE_PIT2(r8, 0x4040ae77, &(0x7f0000000180)={0x1}) ioctl$KVM_SET_PIT2(r8, 0x4070aea0, &(0x7f00000000c0)={[{0x8d, 0x7061, 0xf, 0xc0, 0xf9, 0x0, 0xa0, 0x6, 0x7f, 0x0, 0x7, 0x0, 0x5}, {0x19, 0x7, 0x4, 0x1d, 0x4, 0xf3, 0x9, 0x80, 0x7, 0x6, 0xe7, 0x9}, {0x3, 0x10, 0x4, 0x40, 0x10, 0xd2, 0x3, 0x7, 0xad, 0x72, 0x10, 0x6, 0x4}], 0x3f}) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io(r6, &(0x7f0000000340)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="200a05"], 0x0, 0x0, 0x0, 0x0}, 0x0) r9 = getpgrp(r4) r10 = syz_open_procfs(r9, &(0x7f0000000040)='wchan\x00') write$FUSE_NOTIFY_RETRIEVE(r10, 0x0, 0x4283cafe) 531.788845ms ago: executing program 2 (id=211): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r0, &(0x7f0000000040)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) read$FUSE(r0, &(0x7f0000002080)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f00000040c0)={0x10, 0x0, r3}, 0x10) (async) r5 = syz_open_procfs(r2, &(0x7f0000004100)='net/xfrm_stat\x00') ioctl$UFFDIO_CONTINUE(r5, 0xc020aa07, &(0x7f0000004140)={{&(0x7f0000ffb000/0x2000)=nil, 0x2000}}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r5, 0xc0189379, &(0x7f0000004180)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) (async) r7 = userfaultfd(0x80001) write$FUSE_BMAP(r0, &(0x7f00000041c0)={0x18, 0xfffffffffffffff5, r1, {0x4}}, 0x18) (async) ioctl$SIOCAX25DELFWD(r5, 0x89eb, &(0x7f0000004200)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) (async) r8 = accept4(0xffffffffffffffff, &(0x7f0000004240)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f00000042c0)=0x80, 0x80800) splice(r9, &(0x7f0000004300)=0xe2f, r6, &(0x7f0000004340)=0x6, 0x7, 0x1) (async) cachestat(r8, &(0x7f0000004380)={0xfffffffffffffffa, 0x6}, &(0x7f00000043c0), 0x0) (async) readv(r7, &(0x7f0000004440)=[{&(0x7f0000004400)=""/37, 0x25}], 0x1) (async) r10 = syz_open_procfs(r2, &(0x7f0000004480)='attr/current\x00') mount$9p_fd(0x0, &(0x7f00000044c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000004540)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[{@cache_none}, {@msize={'msize', 0x3d, 0xb}}, {@cache_none}, {@fscache}], [{@subj_type={'subj_type', 0x3d, '-^*,#'}}, {@audit}, {@hash}, {@euid_eq={'euid', 0x3d, r4}}, {@flag='nolazytime'}]}}) (async) accept4$packet(r8, &(0x7f0000004600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000004640)=0x14, 0x800) (async) ioctl$vim2m_VIDIOC_QBUF(r5, 0xc058560f, &(0x7f0000004700)=@multiplanar_overlay={0x3, 0x2, 0x4, 0x40, 0x7f, {}, {0x7, 0x1, 0x6, 0x0, 0x8, 0x2, "8af0ae2b"}, 0x274, 0x3, {&(0x7f0000004680)=[{0xffffff80, 0x758d, {0x7fffffff}, 0x80000000}, {0x4, 0x80, {0xa}, 0x1ff}]}, 0x6, 0x0, r6}) (async) ioctl$vim2m_VIDIOC_STREAMOFF(r6, 0x40045612, &(0x7f0000004780)=0x1) (async) ioctl$vim2m_VIDIOC_G_FMT(r6, 0xc0d05604, &(0x7f00000047c0)={0x2, @pix_mp={0x2, 0x9, 0x32314d48, 0x8, 0xc, [{0x4, 0x2}, {0x7ff, 0x10000}, {0x9, 0xfffffff7}, {0x8, 0x7}, {0x8, 0x7}, {0xebf, 0x8}, {0x2, 0x3}, {0x6, 0x2}], 0x9, 0x0, 0x3, 0x1, 0x3}}) (async) ioctl$vim2m_VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f00000048c0)={0x8000, 0x5}) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000004940)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000004900)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r11, &(0x7f0000004980)={0x15, 0x110, 0xfa00, {r12, 0x19, 0x0, 0x0, 0x0, @in={0x2, 0x4e24, @empty}, @ib={0x1b, 0xf800, 0x40, {"b67dd631814b10176d962ea8f19ddebf"}, 0x49f, 0x5, 0x7}}}, 0x118) (async) read$FUSE(r0, &(0x7f0000004ac0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_OPEN(r10, &(0x7f0000006b00)={0x20, 0x24, r13, {0x0, 0x10}}, 0x20) (async) read$FUSE(r5, &(0x7f0000006b40)={0x2020}, 0x2020) (async) statx(r5, &(0x7f0000008b80)='./file0\x00', 0x0, 0x7ff, &(0x7f0000008bc0)) (async) r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000008cc0), r14) (async) syz_open_dev$vim2m(&(0x7f0000008d00), 0x4, 0x2) 408.894865ms ago: executing program 3 (id=212): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_DONE(r0, 0x29, 0xc9, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000000)) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000840)={r2, @in6={{0xa, 0x4e20, 0x3ae, @empty, 0x129}}, 0x2, 0x2, 0x614, 0x1, 0xd, 0x7, 0x4}, 0x9c) r3 = landlock_create_ruleset(&(0x7f0000000000)={0x10, 0x0, 0x3}, 0x18, 0x0) landlock_restrict_self(r3, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = landlock_create_ruleset(&(0x7f0000000080)={0x220, 0x1, 0x1}, 0x18, 0x0) landlock_restrict_self(r5, 0x0) landlock_restrict_self(r5, 0x1) tkill(r4, 0x18) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_buf(r6, 0x6, 0xe, &(0x7f0000000140)="f932e285c842e6047b25aa7c4a49ff6cd8617b49ef55ac198346bbad14f67ee9928f7fc823a3fb29ab2a2ee74f653c345511ec82ea9c84c0ac94aff839bc5a1354fbd6a9f2198d465f2363dd22a2e5019ca42037", 0x54) 341.446596ms ago: executing program 2 (id=213): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x1c, 0x140f, 0x1, 0x70bd2c, 0x25dfdbfa, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xc, 0x45, 'ib_srpt\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40051}, 0x4000) (async) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) (async) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000280)="580000001400192340834b80040d8c560a0677bc45ff81050000ffff000058000b480400945f64009400050028925a01000000000000008000f0fffeff60a461e700fff5dd0000001000014001080800418e000000", 0x55}], 0x1) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r3 = socket$kcm(0x2, 0xa, 0x2) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000300)="14270c28f91bda4af9954df5bea3aafe", 0x10) (async) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x4, {[@window={0xa, 0x3}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) (async) r4 = accept4$x25(0xffffffffffffffff, &(0x7f0000000000)={0x9, @remote}, &(0x7f0000000040)=0x12, 0x0) ioctl$SIOCX25GDTEFACILITIES(r4, 0x89ea, &(0x7f0000000080)) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x1c, 0x1, 0x4, 0x401, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0) (async) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20048805}, 0x800) (async, rerun: 32) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r6) sendmsg$NL802154_CMD_GET_WPAN_PHY(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, r7, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) ioctl$sock_SIOCETHTOOL(r1, 0x89f1, &(0x7f00000001c0)={'veth1_macvtap\x00', &(0x7f00000000c0)=@ethtool_link_settings={0x4d, 0x10001, 0x7, 0x5, 0xa2, 0x8, 0x2, 0x40, 0xca, 0xf, [0x6, 0x1, 0x4b, 0xfffffffd, 0x0, 0x800188, 0xffffffff, 0x2]}}) 0s ago: executing program 2 (id=214): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="1303000054009155090893b31b71a54a07"], 0xfe33) sendmsg$NL80211_CMD_SET_PMKSA(0xffffffffffffffff, 0x0, 0x800) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r1, 0x90004) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) ppoll(&(0x7f00000000c0)=[{r1, 0x60}], 0x1, 0x0, 0x0, 0x0) r2 = socket$kcm(0x10, 0x5, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="e03f030036000b05d25a806c8c6f94f90224fc6010008f1a21dd02001f3502c137153e37000c0980fc0b10000300", 0x2e}], 0x1}, 0x0) kernel console output (not intermixed with test programs): no interfaces have a carrier Starting crond: [ 58.977971][ T5496] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.005178][ T5496] eql: remember to turn off Van-Jacobson compression on your slave devices OK Starting sshd: OK syzkaller syzkaller login: [ 97.144235][ T9] cfg80211: failed to load regulatory.db Warning: Permanently added '10.128.1.246' (ED25519) to the list of known hosts. [ 272.519664][ T5852] cgroup: Unknown subsys name 'net' [ 272.696520][ T5852] cgroup: Unknown subsys name 'cpuset' [ 272.708059][ T5852] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 274.437075][ T5852] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 276.757132][ T5863] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 276.767696][ T5863] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 276.779087][ T5863] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 276.788776][ T5863] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 276.797685][ T5863] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 276.856127][ T5863] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 276.883201][ T5863] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 276.892953][ T5863] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 276.903111][ T5863] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 276.918539][ T5863] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 276.932387][ T5863] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 276.945782][ T5863] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 276.955387][ T5863] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 276.964538][ T5863] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 276.979445][ T5863] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 277.009556][ T5151] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 277.021520][ T5151] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 277.034347][ T5151] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 277.053550][ T5151] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 277.064991][ T5151] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 277.590975][ T5861] chnl_net:caif_netlink_parms(): no params data found [ 277.761349][ T5867] chnl_net:caif_netlink_parms(): no params data found [ 277.777326][ T5865] chnl_net:caif_netlink_parms(): no params data found [ 277.942995][ T5861] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.954260][ T5861] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.965419][ T5861] bridge_slave_0: entered allmulticast mode [ 277.977231][ T5861] bridge_slave_0: entered promiscuous mode [ 278.015942][ T5861] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.024486][ T5861] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.034427][ T5861] bridge_slave_1: entered allmulticast mode [ 278.041899][ T5861] bridge_slave_1: entered promiscuous mode [ 278.057197][ T5871] chnl_net:caif_netlink_parms(): no params data found [ 278.171534][ T5867] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.179498][ T5867] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.188472][ T5867] bridge_slave_0: entered allmulticast mode [ 278.197506][ T5867] bridge_slave_0: entered promiscuous mode [ 278.226941][ T5861] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 278.254250][ T5867] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.266193][ T5867] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.275722][ T5867] bridge_slave_1: entered allmulticast mode [ 278.285442][ T5867] bridge_slave_1: entered promiscuous mode [ 278.295362][ T5865] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.304563][ T5865] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.313699][ T5865] bridge_slave_0: entered allmulticast mode [ 278.322795][ T5865] bridge_slave_0: entered promiscuous mode [ 278.335198][ T5861] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 278.371949][ T5865] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.383467][ T5865] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.394308][ T5865] bridge_slave_1: entered allmulticast mode [ 278.402113][ T5865] bridge_slave_1: entered promiscuous mode [ 278.486123][ T5867] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 278.514855][ T5861] team0: Port device team_slave_0 added [ 278.540495][ T5867] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 278.555346][ T5865] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 278.571201][ T5861] team0: Port device team_slave_1 added [ 278.608748][ T5865] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 278.635998][ T5871] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.648089][ T5871] bridge0: port 1(bridge_slave_0) entered disabled state [ 278.657355][ T5871] bridge_slave_0: entered allmulticast mode [ 278.666726][ T5871] bridge_slave_0: entered promiscuous mode [ 278.718559][ T5871] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.727814][ T5871] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.736740][ T5871] bridge_slave_1: entered allmulticast mode [ 278.749610][ T5871] bridge_slave_1: entered promiscuous mode [ 278.762345][ T5867] team0: Port device team_slave_0 added [ 278.785047][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 278.792865][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 278.823413][ T5151] Bluetooth: hci0: command tx timeout [ 278.829733][ T5861] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 278.862003][ T5867] team0: Port device team_slave_1 added [ 278.872739][ T5865] team0: Port device team_slave_0 added [ 278.883435][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 278.892590][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 278.926069][ T5861] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 278.976145][ T5865] team0: Port device team_slave_1 added [ 278.983967][ T5151] Bluetooth: hci1: command tx timeout [ 279.017814][ T5871] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 279.062877][ T5151] Bluetooth: hci2: command tx timeout [ 279.063042][ T5865] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 279.078669][ T5865] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 279.113404][ T5865] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 279.129995][ T5871] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 279.141827][ T5867] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 279.150567][ T5151] Bluetooth: hci3: command tx timeout [ 279.150658][ T5867] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 279.188092][ T5867] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 279.205197][ T5867] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 279.213697][ T5867] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 279.249693][ T5867] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 279.267120][ T5865] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 279.274982][ T5865] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 279.309557][ T5865] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 279.415698][ T5861] hsr_slave_0: entered promiscuous mode [ 279.428172][ T5861] hsr_slave_1: entered promiscuous mode [ 279.441022][ T5871] team0: Port device team_slave_0 added [ 279.452906][ T5871] team0: Port device team_slave_1 added [ 279.535355][ T5867] hsr_slave_0: entered promiscuous mode [ 279.544404][ T5867] hsr_slave_1: entered promiscuous mode [ 279.551550][ T5867] debugfs: 'hsr0' already exists in 'hsr' [ 279.559510][ T5867] Cannot create hsr debugfs directory [ 279.624814][ T5865] hsr_slave_0: entered promiscuous mode [ 279.633567][ T5865] hsr_slave_1: entered promiscuous mode [ 279.641422][ T5865] debugfs: 'hsr0' already exists in 'hsr' [ 279.650248][ T5865] Cannot create hsr debugfs directory [ 279.657510][ T5871] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 279.665373][ T5871] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 279.694448][ T5871] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 279.710006][ T5871] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 279.718270][ T5871] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 279.749176][ T5871] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 279.966780][ T5871] hsr_slave_0: entered promiscuous mode [ 279.974773][ T5871] hsr_slave_1: entered promiscuous mode [ 279.982563][ T5871] debugfs: 'hsr0' already exists in 'hsr' [ 279.989576][ T5871] Cannot create hsr debugfs directory [ 280.401507][ T5867] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 280.442872][ T5867] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 280.475710][ T5867] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 280.488199][ T5867] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 280.558002][ T5861] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 280.574356][ T5861] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 280.589651][ T5861] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 280.627143][ T5861] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 280.759649][ T5865] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 280.784829][ T5865] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 280.799646][ T5865] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 280.845020][ T5865] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 280.904868][ T5151] Bluetooth: hci0: command tx timeout [ 280.944606][ T5871] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 280.958102][ T5871] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 280.986695][ T5871] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 281.015256][ T5871] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 281.062975][ T5151] Bluetooth: hci1: command tx timeout [ 281.110313][ T5867] 8021q: adding VLAN 0 to HW filter on device bond0 [ 281.142598][ T5151] Bluetooth: hci2: command tx timeout [ 281.165140][ T5861] 8021q: adding VLAN 0 to HW filter on device bond0 [ 281.208354][ T5867] 8021q: adding VLAN 0 to HW filter on device team0 [ 281.223211][ T5151] Bluetooth: hci3: command tx timeout [ 281.232642][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.240903][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 281.268702][ T3001] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.276558][ T3001] bridge0: port 2(bridge_slave_1) entered forwarding state [ 281.289601][ T5861] 8021q: adding VLAN 0 to HW filter on device team0 [ 281.319095][ T3001] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.326967][ T3001] bridge0: port 1(bridge_slave_0) entered forwarding state [ 281.365396][ T3001] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.374703][ T3001] bridge0: port 2(bridge_slave_1) entered forwarding state [ 281.431666][ T5865] 8021q: adding VLAN 0 to HW filter on device bond0 [ 281.514669][ T5871] 8021q: adding VLAN 0 to HW filter on device bond0 [ 281.527657][ T5865] 8021q: adding VLAN 0 to HW filter on device team0 [ 281.587830][ T746] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.597141][ T746] bridge0: port 1(bridge_slave_0) entered forwarding state [ 281.637616][ T746] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.645472][ T746] bridge0: port 2(bridge_slave_1) entered forwarding state [ 281.677766][ T5871] 8021q: adding VLAN 0 to HW filter on device team0 [ 281.760918][ T746] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.769026][ T746] bridge0: port 1(bridge_slave_0) entered forwarding state [ 281.807187][ T746] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.815454][ T746] bridge0: port 2(bridge_slave_1) entered forwarding state [ 281.980884][ T5867] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 282.118969][ T5861] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 282.211637][ T5867] veth0_vlan: entered promiscuous mode [ 282.267450][ T5867] veth1_vlan: entered promiscuous mode [ 282.351456][ T5861] veth0_vlan: entered promiscuous mode [ 282.401232][ T5867] veth0_macvtap: entered promiscuous mode [ 282.418839][ T5865] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 282.429650][ T5861] veth1_vlan: entered promiscuous mode [ 282.439808][ T5867] veth1_macvtap: entered promiscuous mode [ 282.495970][ T5867] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 282.518886][ T5871] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 282.547142][ T5867] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 282.571674][ T3001] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.584336][ T3007] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.595914][ T3007] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.611792][ T3007] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.624932][ T5861] veth0_macvtap: entered promiscuous mode [ 282.644996][ T5861] veth1_macvtap: entered promiscuous mode [ 282.698678][ T5865] veth0_vlan: entered promiscuous mode [ 282.747161][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 282.767215][ T5865] veth1_vlan: entered promiscuous mode [ 282.789863][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 282.857022][ T5871] veth0_vlan: entered promiscuous mode [ 282.864905][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 282.881015][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 282.886510][ T3007] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.920652][ T3007] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.944866][ T3007] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.956665][ T3007] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.981419][ T5871] veth1_vlan: entered promiscuous mode [ 282.987928][ T5151] Bluetooth: hci0: command tx timeout [ 283.014606][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 283.023535][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 283.119435][ T5865] veth0_macvtap: entered promiscuous mode [ 283.142827][ T5151] Bluetooth: hci1: command tx timeout [ 283.159704][ T5865] veth1_macvtap: entered promiscuous mode [ 283.168619][ T5867] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 283.191796][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 283.210964][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 283.224042][ T5151] Bluetooth: hci2: command tx timeout [ 283.240091][ T5865] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 283.255981][ T5871] veth0_macvtap: entered promiscuous mode [ 283.285123][ T5865] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 283.302915][ T5151] Bluetooth: hci3: command tx timeout [ 283.320945][ T5871] veth1_macvtap: entered promiscuous mode [ 283.369758][ T746] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 283.394008][ T3001] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.403658][ T746] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 283.419457][ T3001] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.448843][ T3001] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.467113][ T3001] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.520610][ T5871] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 283.574947][ T5871] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 283.638295][ T5946] syz.0.1 uses obsolete (PF_INET,SOCK_PACKET) [ 283.645620][ T3001] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.647000][ T3001] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.672533][ T5909] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 283.708028][ T3001] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.722503][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 283.726706][ T3001] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.732385][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 283.819685][ T3001] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 283.832273][ T3001] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 283.868655][ T5909] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 283.893193][ T5909] usb 2-1: can't read configurations, error -71 [ 283.903970][ T5923] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 283.938938][ T3007] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 283.953590][ T3007] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 284.065740][ T5923] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 284.081698][ T3001] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 284.098637][ T3001] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 284.100564][ T5923] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 284.120463][ T5923] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 284.133502][ T5923] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 284.143399][ T5923] usb 1-1: SerialNumber: syz [ 284.391507][ T5923] usb 1-1: 0:2 : does not exist [ 284.432947][ T5923] usb 1-1: unit 255 not found! [ 284.465042][ T5923] usb 1-1: 5:0: cannot get min/max values for control 6 (id 5) [ 284.498225][ T5923] usb 1-1: 5:0: cannot get min/max values for control 13 (id 5) [ 284.538565][ T5923] usb 1-1: 5:0: cannot get min/max values for control 17 (id 5) [ 284.614470][ T5923] usb 1-1: USB disconnect, device number 2 [ 284.645494][ T5961] openvswitch: netlink: Invalid VLAN frame [ 284.758251][ T5862] udevd[5862]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 284.784387][ T5968] Zero length message leads to an empty skb [ 284.940883][ T5977] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10'. [ 284.995355][ T5980] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 285.061535][ T5151] Bluetooth: hci0: command tx timeout [ 285.211868][ T892] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 285.220351][ T5986] warning: `syz.0.14' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 285.239086][ T5151] Bluetooth: hci1: command tx timeout [ 285.258894][ T5987] netlink: 48 bytes leftover after parsing attributes in process `syz.1.13'. [ 285.302193][ T5151] Bluetooth: hci2: command tx timeout [ 285.382220][ T5151] Bluetooth: hci3: command tx timeout [ 285.383158][ T892] usb 3-1: Using ep0 maxpacket: 32 [ 285.422997][ T892] usb 3-1: config 0 has an invalid interface number: 235 but max is 0 [ 285.429250][ T5151] Bluetooth: hci2: connection err: -111 [ 285.441718][ T5151] Bluetooth: hci2: connection err: -111 [ 285.486487][ T892] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 285.497759][ T892] usb 3-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 285.509858][ T892] usb 3-1: config 0 has no interface number 1 [ 285.534320][ T892] usb 3-1: config 0 interface 235 altsetting 0 endpoint 0x1 has invalid maxpacket 9216, setting to 64 [ 285.554839][ T5996] netlink: 'syz.1.17': attribute type 1 has an invalid length. [ 285.557286][ T892] usb 3-1: config 0 interface 235 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 285.571968][ T5909] usb 1-1: new low-speed USB device number 3 using dummy_hcd [ 285.589829][ T892] usb 3-1: New USB device found, idVendor=085a, idProduct=0009, bcdDevice=a3.47 [ 285.602932][ T892] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.609591][ T5998] netlink: 'syz.1.17': attribute type 1 has an invalid length. [ 285.616277][ T892] usb 3-1: Product: syz [ 285.629191][ T892] usb 3-1: Manufacturer: syz [ 285.638498][ T892] usb 3-1: SerialNumber: syz [ 285.649816][ T892] usb 3-1: config 0 descriptor?? [ 285.732655][ T5909] usb 1-1: device descriptor read/64, error -71 [ 285.883561][ T892] kaweth 3-1:0.235: Firmware present in device. [ 285.981169][ T5909] usb 1-1: new low-speed USB device number 4 using dummy_hcd [ 286.021614][ T982] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 286.062325][ T5977] capability: warning: `syz.2.10' uses deprecated v2 capabilities in a way that may be insecure [ 286.082983][ T892] kaweth 3-1:0.235: Error reading configuration (-71), no net device created [ 286.096150][ T892] kaweth 3-1:0.235: probe with driver kaweth failed with error -5 [ 286.111492][ T5909] usb 1-1: device descriptor read/64, error -71 [ 286.129269][ T892] kaweth 3-1:0.0: Firmware present in device. [ 286.136357][ T892] kaweth 3-1:0.0: Error reading configuration (-71), no net device created [ 286.147242][ T892] kaweth 3-1:0.0: probe with driver kaweth failed with error -5 [ 286.159695][ T892] usb 3-1: USB disconnect, device number 2 [ 286.196664][ T982] usb 2-1: too many endpoints for config 0 interface 0 altsetting 2: 255, using maximum allowed: 30 [ 286.209733][ T982] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 286.220483][ T982] usb 2-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 286.224732][ T5909] usb usb1-port1: attempt power cycle [ 286.235732][ T982] usb 2-1: config 0 interface 0 has no altsetting 0 [ 286.248508][ T982] usb 2-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 286.258277][ T982] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.273079][ T982] usb 2-1: config 0 descriptor?? [ 286.581256][ T5909] usb 1-1: new low-speed USB device number 5 using dummy_hcd [ 286.605011][ T5909] usb 1-1: device descriptor read/8, error -71 [ 286.660474][ T6003] ADFS-fs (loop2): error: unable to read block 3, try 0 [ 286.697816][ T982] uclogic 0003:28BD:0071.0001: interface is invalid, ignoring [ 286.850713][ T5909] usb 1-1: new low-speed USB device number 6 using dummy_hcd [ 286.881521][ T5909] usb 1-1: device descriptor read/8, error -71 [ 286.891037][ T6001] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 286.899939][ T6001] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 286.910458][ T24] usb 2-1: USB disconnect, device number 4 [ 286.990760][ T5909] usb usb1-port1: unable to enumerate USB device [ 287.021290][ T6007] mmap: syz.2.21 (6007) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 287.596901][ T6019] usb usb8: usbfs: process 6019 (syz.1.25) did not claim interface 0 before use [ 288.050359][ T6021] netlink: 132 bytes leftover after parsing attributes in process `syz.3.26'. [ 288.065692][ T6021] netlink: 132 bytes leftover after parsing attributes in process `syz.3.26'. [ 288.154558][ T6025] raw_sendmsg: syz.3.27 forgot to set AF_INET. Fix it! [ 288.439781][ T5909] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 288.489055][ T6034] /dev/sg0: Can't lookup blockdev [ 288.509759][ T5948] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 288.619730][ T5909] usb 4-1: Using ep0 maxpacket: 8 [ 288.627509][ T5909] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 288.649008][ T5909] usb 4-1: config 0 has no interface number 0 [ 288.662017][ T5909] usb 4-1: config 0 interface 132 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 288.692736][ T5909] usb 4-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.02 [ 288.705732][ T5948] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 288.737200][ T5909] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.746353][ T5948] usb 2-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 288.776646][ T5948] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.785389][ T5909] usb 4-1: Product: syz [ 288.790392][ T5909] usb 4-1: Manufacturer: syz [ 288.795032][ T5909] usb 4-1: SerialNumber: syz [ 288.799923][ T5948] usb 2-1: Product: syz [ 288.804197][ T5948] usb 2-1: Manufacturer: syz [ 288.814487][ T5909] usb 4-1: config 0 descriptor?? [ 288.820248][ T5948] usb 2-1: SerialNumber: syz [ 288.831858][ T5948] usb 2-1: config 0 descriptor?? [ 288.850258][ T5948] ims_pcu 2-1:0.0: Union descriptor too short (2 vs 5) [ 288.860144][ T5948] ims_pcu 2-1:0.0: probe with driver ims_pcu failed with error -22 [ 289.046269][ T6028] ufs: Unknown parameter 'discard' [ 289.065474][ T5909] go7007 4-1:0.132: probe with driver go7007 failed with error -12 [ 289.069531][ T24] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 289.091758][ T5909] usb 4-1: USB disconnect, device number 2 [ 289.249433][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 289.270822][ T5948] usb 2-1: USB disconnect, device number 5 [ 289.285716][ T24] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 289.309940][ T24] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0 [ 289.337528][ T24] usb 1-1: config 0 interface 0 has no altsetting 0 [ 289.350280][ T24] usb 1-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 289.365078][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.375864][ T24] usb 1-1: Product: syz [ 289.382356][ T24] usb 1-1: Manufacturer: syz [ 289.387305][ T24] usb 1-1: SerialNumber: syz [ 289.411144][ T24] usb 1-1: config 0 descriptor?? [ 289.772608][ T6043] netlink: 'syz.3.34': attribute type 10 has an invalid length. [ 289.783075][ T6043] netlink: 55 bytes leftover after parsing attributes in process `syz.3.34'. [ 289.831418][ T6044] binder_alloc: 6042: binder_alloc_buf, no vma [ 289.851082][ T6044] binder: 6042:6044 ioctl c0306201 200000000b00 returned -14 [ 290.093477][ T6050] netlink: 'syz.3.36': attribute type 21 has an invalid length. [ 290.136586][ T6050] netlink: 'syz.3.36': attribute type 1 has an invalid length. [ 290.648767][ T892] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 290.768811][ T5948] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 290.822207][ T892] usb 2-1: unable to get BOS descriptor or descriptor too short [ 290.830871][ T892] usb 2-1: not running at top speed; connect to a high speed hub [ 290.844888][ T892] usb 2-1: config 1 interface 0 has no altsetting 0 [ 290.858141][ T892] usb 2-1: New USB device found, idVendor=0b0e, idProduct=ffff, bcdDevice= 0.40 [ 290.871037][ T892] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.882690][ T892] usb 2-1: Product: syz [ 290.887088][ T892] usb 2-1: Manufacturer: syz [ 290.893137][ T892] usb 2-1: SerialNumber: syz [ 290.931304][ T5948] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 290.943027][ T5948] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 290.956056][ T5948] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 290.967674][ T5948] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 290.976190][ T5948] usb 4-1: Manufacturer: syz [ 290.990557][ T5948] usb 4-1: config 0 descriptor?? [ 291.088606][ T5948] rc_core: IR keymap rc-hauppauge not found [ 291.094940][ T5948] Registered IR keymap rc-empty [ 291.112475][ T5948] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 291.126105][ T6066] libceph: resolve '4' (ret=-3): failed [ 291.150656][ T5948] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input7 [ 291.177011][ T892] usbhid 2-1:1.0: can't add hid device: -71 [ 291.190744][ T892] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 291.206892][ T892] usb 2-1: USB disconnect, device number 6 [ 291.209570][ T6064] capability: warning: `syz.3.39' uses 32-bit capabilities (legacy support in use) [ 291.281699][ T24] usb 4-1: USB disconnect, device number 3 [ 291.722021][ T6079] faux_driver vkms: [drm] Unknown color mode 6; guessing buffer size. [ 291.758245][ T5948] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 291.779960][ T5909] usb 1-1: USB disconnect, device number 7 [ 291.878899][ T6084] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 291.917416][ T6085] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 291.938576][ T5948] usb 3-1: Using ep0 maxpacket: 8 [ 291.947100][ T6085] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 291.959046][ T5948] usb 3-1: config 0 has an invalid interface number: 52 but max is 0 [ 291.971686][ T5948] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 291.991465][ T6085] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 292.002729][ T5948] usb 3-1: config 0 has no interface number 0 [ 292.010503][ T5948] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 292.022580][ T6092] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 292.028738][ T6085] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 292.037778][ T6092] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 292.049300][ T5948] usb 3-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 292.078766][ T5948] usb 3-1: config 0 interface 52 has no altsetting 0 [ 292.094916][ T5948] usb 3-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 292.104957][ T5948] usb 3-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 292.114337][ T5948] usb 3-1: Manufacturer: syz [ 292.128657][ T5948] usb 3-1: config 0 descriptor?? [ 292.342817][ T5948] usb 3-1: Can not set alternate setting to 1, error: -71 [ 292.366604][ T5948] synaptics_usb 3-1:0.52: probe with driver synaptics_usb failed with error -71 [ 292.429044][ T5948] usb 3-1: USB disconnect, device number 3 [ 292.547829][ T5909] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 292.699702][ T892] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 292.717930][ T5909] usb 1-1: Using ep0 maxpacket: 16 [ 292.726551][ T5909] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 292.737111][ T5909] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.752879][ T5909] usb 1-1: config 0 descriptor?? [ 292.784718][ T5909] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 292.857541][ T892] usb 2-1: Using ep0 maxpacket: 32 [ 292.865480][ T892] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 292.898345][ T892] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 292.923926][ T892] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 292.934097][ T892] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.972566][ T6105] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 292.986271][ T892] usb 2-1: config 0 descriptor?? [ 293.022332][ T6105] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 293.062565][ T5909] usb 1-1: Detected FT232A [ 293.082826][ T5909] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 293.124828][ T5909] usb 1-1: USB disconnect, device number 8 [ 293.145054][ T5909] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 293.155666][ T5909] ftdi_sio 1-1:0.0: device disconnected [ 293.378620][ T5948] usb 3-1: new low-speed USB device number 4 using dummy_hcd [ 293.427367][ T6138] netlink: 36 bytes leftover after parsing attributes in process `syz.3.56'. [ 293.438864][ T892] koneplus 0003:1E7D:2D51.0002: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.1-1/input0 [ 293.439767][ T6138] netlink: 36 bytes leftover after parsing attributes in process `syz.3.56'. [ 293.461676][ T6138] netlink: 36 bytes leftover after parsing attributes in process `syz.3.56'. [ 293.516359][ T6138] netlink: 36 bytes leftover after parsing attributes in process `syz.3.56'. [ 293.530909][ T6138] netlink: 36 bytes leftover after parsing attributes in process `syz.3.56'. [ 293.540332][ T6138] netlink: 36 bytes leftover after parsing attributes in process `syz.3.56'. [ 293.570673][ T5948] usb 3-1: config 0 has an invalid interface number: 69 but max is 0 [ 293.596673][ T5948] usb 3-1: config 0 has no interface number 0 [ 293.716341][ T6138] netlink: 36 bytes leftover after parsing attributes in process `syz.3.56'. [ 293.727748][ T6138] netlink: 36 bytes leftover after parsing attributes in process `syz.3.56'. [ 293.738625][ T6138] netlink: 36 bytes leftover after parsing attributes in process `syz.3.56'. [ 293.759347][ T6144] loop3: detected capacity change from 0 to 1 [ 293.779192][ T6144] Dev loop3: unable to read RDB block 1 [ 293.786502][ T6144] loop3: unable to read partition table [ 293.795892][ T6144] loop3: partition table beyond EOD, truncated [ 293.808639][ T6144] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 293.835537][ T5201] Dev loop3: unable to read RDB block 1 [ 293.844068][ T5201] loop3: unable to read partition table [ 293.852006][ T5201] loop3: partition table beyond EOD, truncated [ 293.877156][ T6113] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 293.877156][ T6113] The task syz.1.48 (6113) triggered the difference, watch for misbehavior. [ 294.147436][ T5909] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 294.297600][ T5909] usb 4-1: Using ep0 maxpacket: 32 [ 294.306465][ T5909] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 294.315692][ T5909] usb 4-1: config 0 has no interface number 0 [ 294.322558][ T5909] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 294.335864][ T5909] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 294.345382][ T5909] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.354026][ T5909] usb 4-1: Product: syz [ 294.358455][ T5909] usb 4-1: Manufacturer: syz [ 294.363309][ T5909] usb 4-1: SerialNumber: syz [ 294.371089][ T5909] usb 4-1: config 0 descriptor?? [ 294.376796][ T24] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 294.382179][ T5909] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 294.396876][ T5909] em28xx 4-1:0.132: Video interface 132 found: [ 294.526777][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 294.535956][ T24] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 294.548221][ T24] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 294.559683][ T24] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 294.571131][ T24] usb 1-1: config 1 has no interface number 0 [ 294.579327][ T24] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 294.592200][ T24] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 294.606040][ T24] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 294.618238][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.641946][ T24] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 294.796632][ T5909] em28xx 4-1:0.132: unknown em28xx chip ID (0) [ 294.841966][ T24] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached [ 295.164435][ T892] usb 1-1: USB disconnect, device number 9 [ 295.175629][ T892] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 295.321455][ T5909] em28xx 4-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 295.342616][ T5909] em28xx 4-1:0.132: board has no eeprom [ 295.397875][ T24] usb 2-1: USB disconnect, device number 7 [ 295.406504][ T5909] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 295.416615][ T5909] em28xx 4-1:0.132: analog set to bulk mode. [ 295.425843][ T10] em28xx 4-1:0.132: Registering V4L2 extension [ 295.463680][ T5909] usb 4-1: USB disconnect, device number 4 [ 295.473676][ T5909] em28xx 4-1:0.132: Disconnecting em28xx [ 295.611237][ T6171] Scaler: ================= START STATUS ================= [ 295.624315][ T6171] Scaler: ================== END STATUS ================== [ 295.642267][ T10] em28xx 4-1:0.132: Config register raw data: 0xffffffed [ 295.652576][ T10] em28xx 4-1:0.132: AC97 chip type couldn't be determined [ 295.661705][ T10] em28xx 4-1:0.132: No AC97 audio processor [ 295.673059][ T892] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 295.688890][ T10] usb 4-1: Decoder not found [ 295.694858][ T10] em28xx 4-1:0.132: failed to create media graph [ 295.702062][ T10] em28xx 4-1:0.132: V4L2 device video103 deregistered [ 295.712153][ T10] em28xx 4-1:0.132: Remote control support is not available for this card. [ 295.721577][ T5909] em28xx 4-1:0.132: Closing input extension [ 295.737378][ T5909] em28xx 4-1:0.132: Freeing device [ 295.859182][ T892] usb 1-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 295.876108][ T892] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.893835][ T892] usb 1-1: config 0 descriptor?? [ 296.045198][ T5948] usb 3-1: New USB device found, idVendor=0582, idProduct=0029, bcdDevice=bf.71 [ 296.056631][ T5948] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.069712][ T5948] usb 3-1: config 0 descriptor?? [ 296.077250][ T5948] usb 3-1: can't set config #0, error -71 [ 296.097459][ T5948] usb 3-1: USB disconnect, device number 4 [ 296.216677][ T24] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 296.395894][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 296.403381][ T24] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 296.412806][ T24] usb 4-1: config 0 has no interface number 0 [ 296.424268][ T24] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 296.434718][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.445277][ T24] usb 4-1: Product: syz [ 296.452422][ T24] usb 4-1: Manufacturer: syz [ 296.457789][ T24] usb 4-1: SerialNumber: syz [ 296.467535][ T5948] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 296.471911][ T24] usb 4-1: config 0 descriptor?? [ 296.492328][ T24] smsc95xx v2.0.0 [ 296.585835][ T43] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 296.605769][ T5948] usb 3-1: device descriptor read/64, error -71 [ 296.699279][ T892] pegasus 1-1:0.0: probe with driver pegasus failed with error -71 [ 296.720674][ T892] usb 1-1: USB disconnect, device number 10 [ 296.746266][ T43] usb 2-1: Using ep0 maxpacket: 32 [ 296.767443][ T43] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 296.784319][ T43] usb 2-1: config 0 has no interface number 0 [ 296.796836][ T43] usb 2-1: New USB device found, idVendor=093a, idProduct=010e, bcdDevice=30.d8 [ 296.809558][ T43] usb 2-1: New USB device strings: Mfr=3, Product=2, SerialNumber=3 [ 296.856085][ T5948] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 296.857990][ T43] usb 2-1: Product: syz [ 296.892769][ T43] usb 2-1: Manufacturer: syz [ 296.901160][ T24] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 296.924702][ T43] usb 2-1: SerialNumber: syz [ 296.931023][ T24] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 296.944965][ T43] usb 2-1: config 0 descriptor?? [ 296.958273][ T43] gspca_main: mr97310a-2.14.0 probing 093a:010e [ 296.967739][ T43] gspca_mr97310a: reg write [21] error -22 [ 296.978378][ T43] mr97310a 2-1:0.51: probe with driver mr97310a failed with error -22 [ 297.006801][ T5948] usb 3-1: device descriptor read/64, error -71 [ 297.135995][ T5948] usb usb3-port1: attempt power cycle [ 297.161989][ T10] usb 2-1: USB disconnect, device number 8 [ 297.229949][ T6197] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 297.230514][ T6198] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 297.476395][ T5948] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 297.506872][ T5948] usb 3-1: device descriptor read/8, error -71 [ 297.701278][ T24] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000104: -71 [ 297.741142][ T24] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 297.745144][ T5948] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 297.772642][ T24] usb 4-1: USB disconnect, device number 5 [ 297.807195][ T5948] usb 3-1: device descriptor read/8, error -71 [ 297.925522][ T5948] usb usb3-port1: unable to enumerate USB device [ 297.972232][ T6214] fuse: Bad value for 'group_id' [ 297.977630][ T6214] fuse: Bad value for 'group_id' [ 298.074940][ T5940] usb 1-1: new low-speed USB device number 11 using dummy_hcd [ 298.169917][ T6219] syzkaller1: entered promiscuous mode [ 298.176360][ T6219] syzkaller1: entered allmulticast mode [ 298.186819][ T6219] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 298.227061][ T5940] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 298.235704][ T5940] usb 1-1: config 0 has no interface number 0 [ 298.242077][ T5940] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 298.254367][ T5940] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 298.265981][ T5940] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 298.294884][ T5940] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 298.322663][ T5940] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 298.341082][ T5940] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 298.374908][ T5940] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 298.388018][ T5940] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.418064][ T5940] usb 1-1: config 0 descriptor?? [ 298.430641][ T6209] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 298.455722][ T6209] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 298.494969][ T5940] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 298.816979][ T43] usb 1-1: USB disconnect, device number 11 [ 298.837456][ T43] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 298.856623][ T6230] netlink: 24 bytes leftover after parsing attributes in process `syz.3.81'. [ 298.887552][ T6230] netlink: 14 bytes leftover after parsing attributes in process `syz.3.81'. [ 299.012393][ T6230] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 299.032176][ T6230] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 299.052637][ T6230] bond0 (unregistering): Released all slaves [ 299.474349][ T5948] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 299.573297][ T6243] netlink: 'syz.2.86': attribute type 5 has an invalid length. [ 299.583310][ T6243] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.86'. [ 299.637859][ T5948] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 299.673515][ T5948] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 299.715428][ T5948] usb 4-1: New USB device found, idVendor=28bd, idProduct=0075, bcdDevice= 0.00 [ 299.726052][ T5948] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.745347][ T5948] usb 4-1: config 0 descriptor?? [ 299.774126][ T43] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 299.788629][ T6248] netlink: 60 bytes leftover after parsing attributes in process `syz.2.87'. [ 299.947268][ T43] usb 1-1: config 7 has an invalid interface number: 227 but max is 0 [ 299.971860][ T43] usb 1-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 299.992206][ T6232] team_slave_0: entered promiscuous mode [ 299.999333][ T6232] team_slave_1: entered promiscuous mode [ 300.004618][ T43] usb 1-1: config 7 has no interface number 0 [ 300.015598][ T6232] netlink: 'syz.3.82': attribute type 10 has an invalid length. [ 300.021913][ T43] usb 1-1: config 7 interface 227 has no altsetting 0 [ 300.048458][ T6232] team_slave_0: left promiscuous mode [ 300.061283][ T43] usb 1-1: New USB device found, idVendor=79ee, idProduct=ea27, bcdDevice=e1.44 [ 300.083095][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.093316][ T6232] team_slave_1: left promiscuous mode [ 300.107599][ T43] usb 1-1: Product: syz [ 300.116135][ T43] usb 1-1: Manufacturer: syz [ 300.124440][ T43] usb 1-1: SerialNumber: syz [ 300.263521][ T6253] netlink: 'syz.2.89': attribute type 1 has an invalid length. [ 300.282587][ T5948] usb 4-1: string descriptor 0 read error: -71 [ 300.293681][ T6253] netlink: 'syz.2.89': attribute type 1 has an invalid length. [ 300.305619][ T6253] netlink: 9172 bytes leftover after parsing attributes in process `syz.2.89'. [ 300.322395][ T5948] usb 4-1: USB disconnect, device number 6 [ 300.363236][ T6241] netlink: 'syz.0.85': attribute type 3 has an invalid length. [ 300.383386][ T43] cdc_wdm 1-1:7.227: More than one union descriptor, skipping ... [ 300.407759][ T43] cdc_wdm 1-1:7.227: probe with driver cdc_wdm failed with error -22 [ 300.434626][ T43] usb 1-1: USB disconnect, device number 12 [ 300.573771][ T5909] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 300.745275][ T5909] usb 3-1: not running at top speed; connect to a high speed hub [ 300.757989][ T5909] usb 3-1: config 6 has an invalid interface number: 213 but max is 0 [ 300.768440][ T5909] usb 3-1: config 6 has no interface number 0 [ 300.775170][ T5909] usb 3-1: config 6 interface 213 has no altsetting 0 [ 300.787371][ T5909] usb 3-1: New USB device found, idVendor=0711, idProduct=0210, bcdDevice=2a.5a [ 300.813746][ T5909] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.829829][ T5909] usb 3-1: Product: syz [ 300.835798][ T5909] usb 3-1: Manufacturer: syz [ 300.841657][ T5909] usb 3-1: SerialNumber: syz [ 301.055299][ T6253] ======================================================= [ 301.055299][ T6253] WARNING: The mand mount option has been deprecated and [ 301.055299][ T6253] and is ignored by this kernel. Remove the mand [ 301.055299][ T6253] option from the mount to silence this warning. [ 301.055299][ T6253] ======================================================= [ 301.108241][ T6254] overlayfs: failed to resolve './file0/file0': -2 [ 301.148093][ T5909] mct_u232 3-1:6.213: MCT U232 converter detected [ 301.165953][ T5909] mct_u232 ttyUSB0: expected endpoint missing [ 301.185328][ T5909] usb 3-1: USB disconnect, device number 9 [ 301.206780][ T5909] mct_u232 3-1:6.213: device disconnected [ 301.253587][ T5948] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 301.293885][ T43] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 301.423259][ T5948] usb 1-1: Using ep0 maxpacket: 32 [ 301.431417][ T5948] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 301.443277][ T5948] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 301.456414][ T5948] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 301.470479][ T5948] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 301.473779][ T43] usb 4-1: Using ep0 maxpacket: 8 [ 301.486641][ T5948] usb 1-1: config 0 interface 0 has no altsetting 0 [ 301.505070][ T5948] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 301.514707][ T43] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 301.515378][ T5948] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 301.533241][ T43] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 301.537137][ T5948] usb 1-1: Product: syz [ 301.551504][ T5948] usb 1-1: Manufacturer: syz [ 301.556884][ T5948] usb 1-1: SerialNumber: syz [ 301.563329][ T43] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 301.582460][ T5948] usb 1-1: config 0 descriptor?? [ 301.593540][ T43] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 301.594152][ T5948] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 301.620520][ T43] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 301.628148][ T5948] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 301.673362][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.836560][ T6258] ldusb 1-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 301.846240][ T6258] ldusb 1-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 301.859257][ T5948] usb 1-1: USB disconnect, device number 13 [ 301.865828][ C0] ldusb 1-1:0.0: usb_submit_urb failed (-19) [ 301.879902][ T5948] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 301.904714][ T6263] fuse: Bad value for 'fd' [ 301.920402][ T43] usb 4-1: GET_CAPABILITIES returned 0 [ 301.939384][ T43] usbtmc 4-1:16.0: can't read capabilities [ 302.128230][ T6260] binder: BINDER_SET_CONTEXT_MGR already set [ 302.135932][ T6260] binder: 6259:6260 ioctl 4018620d 200000000040 returned -16 [ 302.153761][ T5151] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 302.164282][ T5151] CPU: 0 UID: 0 PID: 5151 Comm: kworker/u9:1 Not tainted syzkaller #0 PREEMPT(full) [ 302.164312][ T5151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 302.164343][ T5151] Workqueue: hci3 hci_rx_work [ 302.164383][ T5151] Call Trace: [ 302.164392][ T5151] [ 302.164401][ T5151] dump_stack_lvl+0x189/0x250 [ 302.164430][ T5151] ? __pfx_dump_stack_lvl+0x10/0x10 [ 302.164451][ T5151] ? __pfx__printk+0x10/0x10 [ 302.164489][ T5151] ? kernfs_path_from_node+0x250/0x290 [ 302.164519][ T5151] ? kernfs_path_from_node+0x2f/0x290 [ 302.164555][ T5151] sysfs_create_dir_ns+0x259/0x280 [ 302.164589][ T5151] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 302.164622][ T5151] ? do_raw_spin_unlock+0x122/0x240 [ 302.164653][ T5151] kobject_add_internal+0x6ab/0xcc0 [ 302.164693][ T5151] kobject_add+0x155/0x220 [ 302.164727][ T5151] ? __pfx_kobject_add+0x10/0x10 [ 302.164756][ T5151] ? _raw_spin_unlock+0x28/0x50 [ 302.164782][ T5151] ? get_device_parent+0x366/0x3a0 [ 302.164818][ T5151] device_add+0x408/0xb80 [ 302.164852][ T5151] hci_conn_add_sysfs+0xd5/0x210 [ 302.164881][ T5151] le_conn_complete_evt+0xf1d/0x1420 [ 302.164925][ T5151] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 302.164954][ T5151] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 302.164980][ T5151] ? __asan_memcpy+0x40/0x70 [ 302.165013][ T5151] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 302.165039][ T5151] ? skb_pull_data+0xfb/0x200 [ 302.165076][ T5151] hci_le_conn_complete_evt+0x187/0x480 [ 302.165131][ T5151] hci_event_packet+0x78f/0x1260 [ 302.165161][ T5151] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 302.165195][ T5151] ? __pfx_hci_event_packet+0x10/0x10 [ 302.165224][ T5151] ? kcov_remote_start+0x4d3/0x7f0 [ 302.165247][ T5151] ? lockdep_hardirqs_on+0x98/0x140 [ 302.165276][ T5151] ? hci_send_to_monitor+0xe2/0x590 [ 302.165301][ T5151] hci_rx_work+0x3ee/0x1060 [ 302.165336][ T5151] ? process_one_work+0x868/0x15a0 [ 302.165365][ T5151] process_one_work+0x93a/0x15a0 [ 302.165392][ T5151] ? do_raw_spin_unlock+0x122/0x240 [ 302.165440][ T5151] ? __pfx_process_one_work+0x10/0x10 [ 302.165481][ T5151] ? assign_work+0x3a1/0x410 [ 302.165517][ T5151] worker_thread+0x9b0/0xee0 [ 302.165575][ T5151] kthread+0x711/0x8a0 [ 302.165602][ T5151] ? __pfx_worker_thread+0x10/0x10 [ 302.165632][ T5151] ? __pfx_kthread+0x10/0x10 [ 302.165658][ T5151] ? _raw_spin_unlock_irq+0x23/0x50 [ 302.165680][ T5151] ? lockdep_hardirqs_on+0x98/0x140 [ 302.165703][ T5151] ? __pfx_kthread+0x10/0x10 [ 302.165727][ T5151] ret_from_fork+0x599/0xb30 [ 302.165759][ T5151] ? __pfx_ret_from_fork+0x10/0x10 [ 302.165800][ T5151] ? __switch_to_asm+0x39/0x70 [ 302.165822][ T5151] ? __switch_to_asm+0x33/0x70 [ 302.165843][ T5151] ? __pfx_kthread+0x10/0x10 [ 302.165867][ T5151] ret_from_fork_asm+0x1a/0x30 [ 302.165909][ T5151] [ 302.165942][ T5151] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 302.221755][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 302.227800][ T5948] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 302.237259][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 302.238367][ T5151] Bluetooth: hci3: failed to register connection device [ 302.243564][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 302.392915][ T5948] usb 1-1: device descriptor read/64, error -71 [ 302.397834][ C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 302.549063][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 302.558921][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 302.568962][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 302.580435][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 302.601913][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 302.613251][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 302.623197][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 302.633206][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 302.683493][ T5909] usb 4-1: USB disconnect, device number 7 [ 302.702673][ T5948] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 302.810041][ T6272] process 'syz.2.95' launched './file0' with NULL argv: empty string added [ 302.852590][ T5948] usb 1-1: device descriptor read/64, error -71 [ 302.963701][ T5948] usb usb1-port1: attempt power cycle [ 302.978439][ T6274] netlink: 'syz.2.96': attribute type 11 has an invalid length. [ 303.093222][ T30] audit: type=1400 audit(6056463617.396:2): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name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usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 303.452272][ T5909] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 303.483156][ T5948] usb 1-1: device descriptor read/8, error -71 [ 303.541973][ T6278] netlink: 80 bytes leftover after parsing attributes in process `syz.3.98'. [ 303.629619][ T5909] usb 3-1: too many endpoints for config 0 interface 0 altsetting 11: 129, using maximum allowed: 30 [ 303.643434][ T5909] usb 3-1: config 0 interface 0 altsetting 11 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 303.665817][ T5909] usb 3-1: config 0 interface 0 has no altsetting 0 [ 303.675416][ T5909] usb 3-1: New USB device found, idVendor=0c70, idProduct=f001, bcdDevice= 0.00 [ 303.685811][ T5909] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.700364][ T5909] usb 3-1: config 0 descriptor?? [ 303.742223][ T5948] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 303.762991][ T5948] usb 1-1: device descriptor read/8, error -71 [ 303.894324][ T5948] usb usb1-port1: unable to enumerate USB device [ 304.115232][ T5909] usbhid 3-1:0.0: can't add hid device: -71 [ 304.129156][ T5909] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 304.145601][ T5909] usb 3-1: USB disconnect, device number 10 [ 304.167508][ T6285] netlink: 'syz.0.100': attribute type 2 has an invalid length. [ 304.620151][ T6299] netlink: 'syz.0.105': attribute type 2 has an invalid length. [ 304.693295][ T5909] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 304.845831][ T6303] kvm: pic: single mode not supported [ 304.845905][ T6303] kvm: pic: single mode not supported [ 304.852351][ T6303] kvm: pic: single mode not supported [ 304.859344][ T6303] kvm: pic: single mode not supported [ 304.866512][ T6303] kvm: pic: single mode not supported [ 304.872666][ T5909] usb 4-1: Using ep0 maxpacket: 16 [ 304.876301][ T5909] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 304.880937][ T6303] kvm: pic: single mode not supported [ 304.899751][ T6303] kvm: pic: level sensitive irq not supported [ 304.905419][ T5909] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 304.936713][ T6303] kvm: pic: level sensitive irq not supported [ 304.936962][ T6303] kvm: pic: single mode not supported [ 304.941639][ T5909] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.945571][ T6303] kvm: pic: single mode not supported [ 304.959088][ T5909] usb 4-1: Product: syz [ 304.959964][ T6303] kvm: pic: single mode not supported [ 304.969212][ T5909] usb 4-1: Manufacturer: syz [ 304.969350][ T6303] kvm: pic: single mode not supported [ 304.979352][ T5909] usb 4-1: SerialNumber: syz [ 304.984062][ T6303] kvm: pic: level sensitive irq not supported [ 304.990549][ T6303] kvm: pic: level sensitive irq not supported [ 304.998483][ T6303] kvm: pic: level sensitive irq not supported [ 305.000993][ T5909] usb 4-1: config 0 descriptor?? [ 305.005748][ T6303] kvm: pic: level sensitive irq not supported [ 305.024623][ T6303] kvm: pic: level sensitive irq not supported [ 305.031061][ T6303] kvm: pic: level sensitive irq not supported [ 305.033271][ T5909] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 305.045727][ T6303] kvm: pic: level sensitive irq not supported [ 305.052163][ T6303] kvm: pic: level sensitive irq not supported [ 305.073157][ T5909] usb 4-1: Detected FT232R [ 305.161857][ T5964] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 305.224611][ T5909] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 305.323828][ T5964] usb 1-1: unable to get BOS descriptor or descriptor too short [ 305.339280][ T6310] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 305.350884][ T5964] usb 1-1: config 255 has an invalid interface number: 178 but max is 0 [ 305.360766][ T6310] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 305.371297][ T5964] usb 1-1: config 255 has no interface number 0 [ 305.381083][ T5964] usb 1-1: New USB device found, idVendor=07ab, idProduct=0d01, bcdDevice=2a.bd [ 305.393033][ T5964] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.402879][ T5964] usb 1-1: Product: syz [ 305.408909][ T5964] usb 1-1: Manufacturer: syz [ 305.417271][ T5964] usb 1-1: SerialNumber: syz [ 305.453071][ T5909] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 305.581404][ T24] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 305.656765][ T5964] usb 1-1: USB disconnect, device number 18 [ 305.661706][ T5909] usb 4-1: USB disconnect, device number 8 [ 305.716329][ T5909] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 305.732938][ T24] usb 3-1: device descriptor read/64, error -71 [ 305.742195][ T5909] ftdi_sio 4-1:0.0: device disconnected [ 305.971139][ T24] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 306.110977][ T24] usb 3-1: device descriptor read/64, error -71 [ 306.238065][ T24] usb usb3-port1: attempt power cycle [ 306.560703][ T5964] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 306.602290][ T24] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 306.632119][ T24] usb 3-1: device descriptor read/8, error -71 [ 306.700677][ T5964] usb 4-1: device descriptor read/64, error -71 [ 306.740637][ T892] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 306.870788][ T24] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 306.879794][ T892] usb 1-1: device descriptor read/64, error -71 [ 306.912868][ T24] usb 3-1: device descriptor read/8, error -71 [ 306.950510][ T5964] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 307.023633][ T24] usb usb3-port1: unable to enumerate USB device [ 307.090436][ T5964] usb 4-1: device descriptor read/64, error -71 [ 307.132949][ T892] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 307.200815][ T5964] usb usb4-port1: attempt power cycle [ 307.270512][ T892] usb 1-1: device descriptor read/64, error -71 [ 307.380725][ T892] usb usb1-port1: attempt power cycle [ 307.550437][ T5964] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 307.570852][ T5964] usb 4-1: device descriptor read/8, error -71 [ 307.730335][ T892] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 307.761073][ T892] usb 1-1: device descriptor read/8, error -71 [ 307.810131][ T5964] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 307.855998][ T5964] usb 4-1: device descriptor read/8, error -71 [ 307.971114][ T5964] usb usb4-port1: unable to enumerate USB device [ 308.010296][ T892] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 308.042872][ T892] usb 1-1: device descriptor read/8, error -71 [ 308.160316][ T892] usb usb1-port1: unable to enumerate USB device [ 308.759799][ T892] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 308.919696][ T892] usb 3-1: Using ep0 maxpacket: 16 [ 308.935057][ T892] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 308.946185][ T892] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.958689][ T892] usb 3-1: Product: syz [ 308.963615][ T892] usb 3-1: Manufacturer: syz [ 308.971994][ T892] usb 3-1: SerialNumber: syz [ 308.996031][ T892] r8152-cfgselector 3-1: Unknown version 0x0000 [ 309.003261][ T892] r8152-cfgselector 3-1: config 0 descriptor?? [ 309.049778][ T5863] Bluetooth: hci3: command 0x0406 tx timeout [ 309.430481][ T10] r8152-cfgselector 3-1: USB disconnect, device number 15 [ 310.509550][ T892] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 310.701639][ T892] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 310.720079][ T892] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 310.746104][ T892] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 310.759688][ T892] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 310.771954][ T892] usb 3-1: SerialNumber: syz [ 311.012953][ T892] usb 3-1: 0:2 : does not exist [ 311.066020][ T892] usb 3-1: USB disconnect, device number 16 [ 311.120864][ T5862] udevd[5862]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 311.156147][ T6352] netlink: 'syz.0.123': attribute type 7 has an invalid length. [ 311.164559][ T6352] netlink: 'syz.0.123': attribute type 8 has an invalid length. [ 311.174709][ T6352] netlink: 'syz.0.123': attribute type 7 has an invalid length. [ 311.186438][ T6352] netlink: 208740 bytes leftover after parsing attributes in process `syz.0.123'. [ 311.581058][ T5948] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 311.768741][ T5948] usb 1-1: Using ep0 maxpacket: 16 [ 311.780106][ T5948] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 311.798372][ T5948] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 311.828019][ T5948] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 311.845860][ T5948] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 311.866648][ T5948] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.885555][ T5948] usb 1-1: Product: syz [ 311.900579][ T5948] usb 1-1: Manufacturer: syz [ 311.911526][ T5948] usb 1-1: SerialNumber: syz [ 312.343955][ T5948] usb 1-1: 0:2 : does not exist [ 312.987598][ T5948] usb 1-1: 1:0: failed to get current value for ch 0 (-22) [ 313.084918][ T5948] usb 1-1: USB disconnect, device number 23 [ 313.399789][ T6356] kexec: Could not allocate control_code_buffer [ 313.670813][ T6379] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 313.837930][ T6386] evm: overlay not supported [ 313.943169][ T5151] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 313.952314][ T5151] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 313.961127][ T5151] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 313.970390][ T5151] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 313.994411][ T5151] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 314.077968][ T5942] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 314.148146][ T6396] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2182154216 (4364308432 ns) > initial count (507749598 ns). Using initial count to start timer. [ 314.256838][ T5942] usb 1-1: device descriptor read/64, error -71 [ 314.506719][ T5942] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 314.517080][ T6391] chnl_net:caif_netlink_parms(): no params data found [ 314.637344][ T5942] usb 1-1: device descriptor read/64, error -71 [ 314.668756][ T2133] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.689932][ T6391] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.697836][ T6391] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.708516][ T6391] bridge_slave_0: entered allmulticast mode [ 314.716385][ T6391] bridge_slave_0: entered promiscuous mode [ 314.725499][ T6391] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.736427][ T6391] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.744034][ T6391] bridge_slave_1: entered allmulticast mode [ 314.753476][ T6391] bridge_slave_1: entered promiscuous mode [ 314.767217][ T5942] usb usb1-port1: attempt power cycle [ 314.803019][ T2133] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.839669][ T6391] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 314.860039][ T6391] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 314.894005][ T2133] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.975022][ T6391] team0: Port device team_slave_0 added [ 315.009724][ T2133] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.032256][ T6391] team0: Port device team_slave_1 added [ 315.092904][ T6391] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 315.101022][ T6391] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 315.129070][ T6391] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 315.140338][ T5942] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 315.145012][ T6391] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 315.160219][ T6391] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 315.195478][ T6391] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 315.197635][ T5942] usb 1-1: device descriptor read/8, error -71 [ 315.379958][ T6391] hsr_slave_0: entered promiscuous mode [ 315.388254][ T6391] hsr_slave_1: entered promiscuous mode [ 315.394990][ T6391] debugfs: 'hsr0' already exists in 'hsr' [ 315.402408][ T6391] Cannot create hsr debugfs directory [ 315.476839][ T5942] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 315.497402][ T5942] usb 1-1: device descriptor read/8, error -71 [ 315.516246][ T6168] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 315.567155][ T2133] bridge_slave_1: left allmulticast mode [ 315.577213][ T2133] bridge_slave_1: left promiscuous mode [ 315.584854][ T2133] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.612272][ T5942] usb usb1-port1: unable to enumerate USB device [ 315.624906][ T2133] bridge_slave_0: left allmulticast mode [ 315.631158][ T2133] bridge_slave_0: left promiscuous mode [ 315.639122][ T2133] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.656265][ T30] audit: type=1800 audit(6056463629.962:3): pid=6419 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.140" name="bus" dev="overlay" ino=231 res=0 errno=0 [ 315.692540][ T6168] usb 3-1: config 0 has an invalid interface number: 128 but max is 0 [ 315.716267][ T6168] usb 3-1: config 0 has no interface number 0 [ 315.729416][ T6168] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 315.753100][ T6168] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.776736][ T6168] usb 3-1: Product: syz [ 315.781588][ T6168] usb 3-1: Manufacturer: syz [ 315.796811][ T6168] usb 3-1: SerialNumber: syz [ 315.817414][ T6168] usb 3-1: config 0 descriptor?? [ 316.099575][ T5863] Bluetooth: hci4: command tx timeout [ 316.165443][ T2133] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 316.178264][ T2133] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 316.189888][ T2133] bond0 (unregistering): Released all slaves [ 316.229913][ T6168] usb 3-1: Firmware: major: 152, minor: 96, hardware type: UNKNOWN (94) [ 316.431154][ T6168] usb 3-1: Read permanent extended address 80:e3:9b:4b:dd:b7:d0:d0 from device [ 316.442582][ T6168] usb 3-1: atusb_probe: initialization failed, error = -524 [ 316.452848][ T6168] atusb 3-1:0.128: probe with driver atusb failed with error -524 [ 316.464742][ T6429] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 316.475366][ T6429] syzkaller0: entered promiscuous mode [ 316.491698][ T6429] syzkaller0: entered allmulticast mode [ 316.639482][ T6415] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 316.677159][ T6415] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 316.723677][ T892] usb 3-1: USB disconnect, device number 17 [ 316.755228][ T2133] hsr_slave_0: left promiscuous mode [ 316.768458][ T2133] hsr_slave_1: left promiscuous mode [ 316.776552][ T2133] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 316.784402][ T2133] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 316.795402][ T2133] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 316.819723][ T2133] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 316.901111][ T2133] veth1_macvtap: left promiscuous mode [ 316.917293][ T2133] veth0_macvtap: left promiscuous mode [ 316.923223][ T2133] veth1_vlan: left promiscuous mode [ 316.947368][ T2133] veth0_vlan: left promiscuous mode [ 317.305329][ T892] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 317.485286][ T892] usb 1-1: Using ep0 maxpacket: 32 [ 317.493265][ T892] usb 1-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 317.525204][ T892] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.569015][ T892] usb 1-1: config 0 descriptor?? [ 317.596989][ T892] gspca_main: sunplus-2.14.0 probing 041e:400b [ 317.745671][ T5909] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 317.795165][ T24] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 317.902830][ T5909] usb 4-1: config 0 has an invalid interface number: 96 but max is 0 [ 317.915739][ T5909] usb 4-1: config 0 has no interface number 0 [ 317.923052][ T5909] usb 4-1: config 0 interface 96 has no altsetting 0 [ 317.937404][ T5909] usb 4-1: New USB device found, idVendor=0424, idProduct=cf30, bcdDevice=f1.73 [ 317.950062][ T5909] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.959173][ T5909] usb 4-1: Product: syz [ 317.963489][ T5909] usb 4-1: Manufacturer: syz [ 317.965017][ T2133] team0 (unregistering): Port device team_slave_1 removed [ 317.968895][ T5909] usb 4-1: SerialNumber: syz [ 317.982034][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 317.985347][ T5909] usb 4-1: config 0 descriptor?? [ 318.008876][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 318.026799][ T24] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 318.039420][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.062411][ T2133] team0 (unregistering): Port device team_slave_0 removed [ 318.072496][ T24] usb 3-1: config 0 descriptor?? [ 318.182475][ T5863] Bluetooth: hci4: command tx timeout [ 318.212049][ T5909] usb 4-1: USB disconnect, device number 13 [ 318.514229][ T24] cm6533_jd 0003:0D8C:0022.0003: unknown main item tag 0x0 [ 318.522523][ T24] cm6533_jd 0003:0D8C:0022.0003: unknown main item tag 0x0 [ 318.569328][ T24] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0D8C:0022.0003/input/input8 [ 318.652668][ T24] cm6533_jd 0003:0D8C:0022.0003: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.2-1/input0 [ 318.818535][ T6391] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 318.883156][ T6391] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 318.924291][ T6391] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 318.951236][ T6391] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 319.033370][ T892] gspca_sunplus: reg_w_riv err -71 [ 319.043648][ T892] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 319.076505][ T892] usb 1-1: USB disconnect, device number 28 [ 319.177377][ T5942] IPVS: starting estimator thread 0... [ 319.193186][ T6472] IPVS: sh: SCTP 172.20.20.187:0 - no destination available [ 319.274471][ T6391] 8021q: adding VLAN 0 to HW filter on device bond0 [ 319.275949][ T6474] IPVS: using max 33 ests per chain, 79200 per kthread [ 319.393945][ T6391] 8021q: adding VLAN 0 to HW filter on device team0 [ 319.412952][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.420354][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 319.486942][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.495248][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 319.634219][ T892] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 319.827881][ T892] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 319.834715][ T5909] usb 3-1: reset high-speed USB device number 18 using dummy_hcd [ 319.845149][ T892] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 319.862979][ T892] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 319.894132][ T892] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.926476][ T892] usb 4-1: config 0 descriptor?? [ 319.948031][ T892] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 319.964400][ T892] dvb-usb: bulk message failed: -22 (3/0) [ 319.995865][ T5942] usb 1-1: new low-speed USB device number 29 using dummy_hcd [ 320.008349][ T892] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 320.026037][ T892] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 320.037030][ T892] usb 4-1: media controller created [ 320.047962][ T892] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 320.081290][ T892] dvb-usb: bulk message failed: -22 (6/0) [ 320.097236][ T892] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 320.117553][ T892] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input9 [ 320.130565][ T6391] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 320.163274][ T892] dvb-usb: schedule remote query interval to 150 msecs. [ 320.196020][ T5942] usb 1-1: config 0 has an invalid interface number: 168 but max is 0 [ 320.211144][ T892] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 320.228065][ T5942] usb 1-1: config 0 has no interface number 0 [ 320.244117][ T5863] Bluetooth: hci4: command tx timeout [ 320.260407][ T892] usb 4-1: USB disconnect, device number 14 [ 320.272225][ T5942] usb 1-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=dd.b8 [ 320.287009][ T5942] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.302169][ T5942] usb 1-1: config 0 descriptor?? [ 320.325292][ T5942] lan78xx 1-1:0.168 (unnamed net_device) (uninitialized): USB bus speed not supported [ 320.352961][ T5942] lan78xx 1-1:0.168: probe with driver lan78xx failed with error -5 [ 320.376604][ T892] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 320.522351][ T5942] usb 1-1: USB disconnect, device number 29 [ 320.830548][ T6510] /dev/nullb0: Can't open blockdev [ 320.880510][ T6391] veth0_vlan: entered promiscuous mode [ 320.912553][ T6391] veth1_vlan: entered promiscuous mode [ 320.926007][ T6513] netlink: 36 bytes leftover after parsing attributes in process `syz.3.153'. [ 321.021122][ T6391] veth0_macvtap: entered promiscuous mode [ 321.051401][ T6391] veth1_macvtap: entered promiscuous mode [ 321.145818][ T6391] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 321.178679][ T6391] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 321.225244][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.249950][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.299126][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.376408][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.433963][ T5909] usb 3-1: device descriptor read/64, error -71 [ 321.483524][ T2133] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 321.491662][ T2133] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 321.574665][ T2976] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 321.584037][ T2976] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 321.685748][ T5909] usb 3-1: reset high-speed USB device number 18 using dummy_hcd [ 321.784045][ T6537] netlink: 'syz.3.159': attribute type 10 has an invalid length. [ 321.847873][ T5909] usb 3-1: device descriptor read/64, error -71 [ 321.901867][ T6537] team0: Port device geneve1 added [ 322.093262][ T5909] usb 3-1: reset high-speed USB device number 18 using dummy_hcd [ 322.116456][ T6537] syz.3.159 (6537) used greatest stack depth: 17384 bytes left [ 322.123063][ T182] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 322.143797][ T5909] usb 3-1: device descriptor read/8, error -71 [ 322.193261][ T5964] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 322.305372][ T182] usb 1-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 322.322848][ T5863] Bluetooth: hci4: command tx timeout [ 322.327787][ T182] usb 1-1: config 0 interface 0 has no altsetting 0 [ 322.337123][ T182] usb 1-1: New USB device found, idVendor=056a, idProduct=0094, bcdDevice= 0.00 [ 322.348677][ T182] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.373977][ T182] usb 1-1: config 0 descriptor?? [ 322.383584][ T5909] usb 3-1: reset high-speed USB device number 18 using dummy_hcd [ 322.387232][ T5964] usb 5-1: Using ep0 maxpacket: 32 [ 322.414410][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.422527][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.431639][ T5964] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 322.442986][ T6168] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 322.461329][ T5964] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 322.465667][ T5909] usb 3-1: device descriptor read/8, error -71 [ 322.472229][ T5964] usb 5-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 322.489781][ T5964] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.510943][ T5964] usb 5-1: config 0 descriptor?? [ 322.647026][ T5948] usb 3-1: USB disconnect, device number 18 [ 322.663786][ T6168] usb 4-1: Using ep0 maxpacket: 8 [ 322.704078][ T6168] usb 4-1: config 1 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 322.733388][ T6168] usb 4-1: config 1 interface 0 has no altsetting 0 [ 322.746023][ T6168] usb 4-1: New USB device found, idVendor=04b3, idProduct=3103, bcdDevice= 0.40 [ 322.758914][ T6168] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.790325][ T6168] usb 4-1: Product: syz [ 322.800522][ T6168] usb 4-1: Manufacturer: syz [ 322.808381][ T6168] usb 4-1: SerialNumber: syz [ 322.841491][ T182] wacom 0003:056A:0094.0004: Using device in hidraw-only mode [ 322.874418][ T182] wacom 0003:056A:0094.0004: hidraw0: USB HID v8.00 Device [HID 056a:0094] on usb-dummy_hcd.0-1/input0 [ 322.902668][ T5948] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 322.943108][ T5964] uclogic 0003:5543:0522.0005: item fetching failed at offset 0/2 [ 322.963772][ T5964] uclogic 0003:5543:0522.0005: parse failed [ 322.970940][ T5964] uclogic 0003:5543:0522.0005: probe with driver uclogic failed with error -22 [ 323.029728][ T182] usb 1-1: USB disconnect, device number 30 [ 323.042647][ T5948] usb 3-1: device descriptor read/64, error -71 [ 323.078319][ T6168] usbhid 4-1:1.0: can't add hid device: -71 [ 323.115475][ T6168] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 323.135443][ T6168] usb 4-1: USB disconnect, device number 15 [ 323.139234][ T6544] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 323.154547][ T6544] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 323.213968][ T6544] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 323.243099][ T6544] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 323.265089][ T9] usb 5-1: USB disconnect, device number 2 [ 323.312305][ T5948] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 323.452546][ T5948] usb 3-1: device descriptor read/64, error -71 [ 323.572727][ T5948] usb usb3-port1: attempt power cycle [ 323.922732][ T5948] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 323.962659][ T5948] usb 3-1: device descriptor read/8, error -71 [ 323.992025][ T5941] usb 1-1: new full-speed USB device number 31 using dummy_hcd [ 324.136822][ T892] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 324.147750][ T5941] usb 1-1: device descriptor read/64, error -71 [ 324.314058][ T892] usb 5-1: config 118 has an invalid interface number: 30 but max is 3 [ 324.326242][ T9] hid-generic 0001:000D:0000.0006: unknown main item tag 0x0 [ 324.334449][ T892] usb 5-1: config 118 has an invalid interface number: 194 but max is 3 [ 324.334480][ T892] usb 5-1: config 118 contains an unexpected descriptor of type 0x2, skipping [ 324.334499][ T892] usb 5-1: config 118 has an invalid interface number: 92 but max is 3 [ 324.334521][ T892] usb 5-1: config 118 contains an unexpected descriptor of type 0x2, skipping [ 324.334539][ T892] usb 5-1: config 118 has an invalid descriptor of length 142, skipping remainder of the config [ 324.334558][ T892] usb 5-1: config 118 has 3 interfaces, different from the descriptor's value: 4 [ 324.334579][ T892] usb 5-1: config 118 has no interface number 0 [ 324.334595][ T892] usb 5-1: config 118 has no interface number 1 [ 324.334613][ T892] usb 5-1: config 118 has no interface number 2 [ 324.345289][ T9] hid-generic 0001:000D:0000.0006: unknown main item tag 0x0 [ 324.383418][ T892] usb 5-1: config 118 interface 30 altsetting 48 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 324.383471][ T892] usb 5-1: config 118 interface 194 altsetting 16 endpoint 0xC has an invalid bInterval 203, changing to 4 [ 324.383501][ T892] usb 5-1: config 118 interface 194 altsetting 16 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 324.383527][ T892] usb 5-1: config 118 interface 194 altsetting 16 has an invalid descriptor for endpoint zero, skipping [ 324.383548][ T892] usb 5-1: config 118 interface 194 altsetting 16 has a duplicate endpoint with address 0xA, skipping [ 324.383572][ T892] usb 5-1: config 118 interface 194 altsetting 16 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 324.383598][ T892] usb 5-1: config 118 interface 194 altsetting 16 has a duplicate endpoint with address 0xA, skipping [ 324.383623][ T892] usb 5-1: config 118 interface 194 altsetting 16 has a duplicate endpoint with address 0xF, skipping [ 324.383647][ T892] usb 5-1: config 118 interface 194 altsetting 16 has a duplicate endpoint with address 0xF, skipping [ 324.383669][ T892] usb 5-1: config 118 interface 194 altsetting 16 has an invalid descriptor for endpoint zero, skipping [ 324.383690][ T892] usb 5-1: config 118 interface 194 altsetting 16 has a duplicate endpoint with address 0x1, skipping [ 324.383713][ T892] usb 5-1: config 118 interface 194 altsetting 16 has a duplicate endpoint with address 0x4, skipping [ 324.402185][ T9] hid-generic 0001:000D:0000.0006: unknown main item tag 0x0 [ 324.431877][ T5941] usb 1-1: new full-speed USB device number 32 using dummy_hcd [ 324.457446][ T6589] netlink: 12 bytes leftover after parsing attributes in process `syz.3.167'. [ 324.516136][ T892] usb 5-1: config 118 interface 92 altsetting 1 has a duplicate endpoint with address 0xD, skipping [ 324.591805][ T9] hid-generic 0001:000D:0000.0006: unknown main item tag 0x0 [ 324.644555][ T9] hid-generic 0001:000D:0000.0006: unknown main item tag 0x0 [ 324.655576][ T9] hid-generic 0001:000D:0000.0006: unknown main item tag 0x0 [ 324.669017][ T9] hid-generic 0001:000D:0000.0006: unknown main item tag 0x0 [ 324.679378][ T9] hid-generic 0001:000D:0000.0006: unknown main item tag 0x0 [ 324.688726][ T9] hid-generic 0001:000D:0000.0006: unknown main item tag 0x0 [ 324.697876][ T9] hid-generic 0001:000D:0000.0006: unknown main item tag 0x0 [ 324.742429][ T9] hid-generic 0001:000D:0000.0006: hidraw0: HID vffffff.ff Device [syz0] on syz0 [ 324.766355][ T892] usb 5-1: config 118 interface 92 altsetting 1 has a duplicate endpoint with address 0xD, skipping [ 324.791622][ T5941] usb 1-1: device descriptor read/64, error -71 [ 324.827036][ T892] usb 5-1: config 118 interface 92 altsetting 1 has a duplicate endpoint with address 0x2, skipping [ 324.857441][ T892] usb 5-1: config 118 interface 92 altsetting 1 has a duplicate endpoint with address 0xA, skipping [ 324.891308][ T6599] tmpfs: Bad value for 'mpol' [ 324.901502][ T892] usb 5-1: config 118 interface 92 altsetting 1 has a duplicate endpoint with address 0xF, skipping [ 324.907474][ T6595] fido_id[6595]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 324.914104][ T5941] usb usb1-port1: attempt power cycle [ 324.952357][ T892] usb 5-1: config 118 interface 92 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 7 [ 324.973170][ T892] usb 5-1: config 118 interface 30 has no altsetting 0 [ 324.981127][ T892] usb 5-1: config 118 interface 194 has no altsetting 0 [ 324.990097][ T892] usb 5-1: config 118 interface 92 has no altsetting 0 [ 325.024270][ T892] usb 5-1: New USB device found, idVendor=0403, idProduct=f06d, bcdDevice=e7.2a [ 325.034060][ T892] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.061428][ T892] usb 5-1: Product: ⤑⨬ljᘳ쳉댸䞰졻륡뎢㣵倵죃찞ƊÌ躜ଆˬ䍻녙֢䪽쾧皘蘡ꝼ⥚⏌맧펵弬筛᳛蕪끉먗ꕎ䝯혂ﱒ偎球핃텄뭹ለ엿䝤꟢泴䔩㶔哇❤韑憀㵈軷爴ؽ㏲鰷蒪趵搈攥鱵✼䠣풦걲䃫愼죒㮘ቺ媭霟淐闔闰⪵劲䧷芭ⷖ㓗㲭퉡ṃ묽ܶ [ 325.126807][ T892] usb 5-1: Manufacturer: ᡊ岭⑳⩰ꓶ뚕ᢓᎩ箣豵퍇䇗겯狜뻡퀵锫찟䰯閥鳧샡뢾謦쑀渀呲墐꺿敖ﲿ瓤㜉䞉脉瘮ɱ⺐魢₤驲慕困ᰶ칩臵楻즵써䢹쩩䧗䫷䐄佸ᥡ꼨熱宯⎓Ꮰ౜ฮ池꧗鴄괏綗臆﹕櫯❟㨘֧㉤曐ݻ㬛詓蒓恮䮇ᱻ鞬礙쓒덀콝椹㚢姲䬃ﭝ犥뇣婸᳡䍥ꫪ鮖 [ 325.162566][ T892] usb 5-1: SerialNumber: 窄敛沷껂﹙툗锊㰿읒㪕뒡㄀᎔ԋ힀礞┈煮胞なﯶ∝졗픺꯼䠛遌⴬贶 [ 325.321426][ T5941] usb 1-1: new full-speed USB device number 33 using dummy_hcd [ 325.352443][ T5941] usb 1-1: device descriptor read/8, error -71 [ 325.353110][ T9] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 325.410755][ T892] ftdi_sio 5-1:118.30: FTDI USB Serial Device converter detected [ 325.421035][ T892] ftdi_sio ttyUSB0: unknown device type: 0xe72a [ 325.434301][ T892] ftdi_sio 5-1:118.194: FTDI USB Serial Device converter detected [ 325.448139][ T892] ftdi_sio ttyUSB1: unknown device type: 0xe72a [ 325.464364][ T892] ftdi_sio 5-1:118.92: FTDI USB Serial Device converter detected [ 325.475198][ T892] ftdi_sio ttyUSB2: unknown device type: 0xe72a [ 325.487380][ T892] usb 5-1: USB disconnect, device number 3 [ 325.507213][ T892] ftdi_sio 5-1:118.30: device disconnected [ 325.525251][ T9] usb 3-1: config 0 has an invalid interface number: 128 but max is 0 [ 325.529834][ T892] ftdi_sio 5-1:118.194: device disconnected [ 325.543554][ T9] usb 3-1: config 0 has no interface number 0 [ 325.549127][ T892] ftdi_sio 5-1:118.92: device disconnected [ 325.559949][ T9] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 325.572295][ T5948] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 325.593450][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.601523][ T5941] usb 1-1: new full-speed USB device number 34 using dummy_hcd [ 325.608248][ T9] usb 3-1: Product: syz [ 325.620147][ T9] usb 3-1: Manufacturer: syz [ 325.625119][ T9] usb 3-1: SerialNumber: syz [ 325.631987][ T5941] usb 1-1: device descriptor read/8, error -71 [ 325.637943][ T9] usb 3-1: config 0 descriptor?? [ 325.754594][ T5948] usb 4-1: unable to get BOS descriptor or descriptor too short [ 325.761724][ T5941] usb usb1-port1: unable to enumerate USB device [ 325.767864][ T5948] usb 4-1: config 1 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 325.785312][ T5948] usb 4-1: config 1 interface 0 has no altsetting 0 [ 325.795295][ T5948] usb 4-1: New USB device found, idVendor=05ac, idProduct=024c, bcdDevice= 0.40 [ 325.805365][ T5948] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.814879][ T5948] usb 4-1: Product: syz [ 325.819369][ T5948] usb 4-1: Manufacturer: syz [ 325.824381][ T5948] usb 4-1: SerialNumber: syz [ 326.039803][ T6611] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 326.053004][ T6611] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 326.082710][ T5948] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input10 [ 326.106341][ T5186] bcm5974 4-1:1.0: could not read from device [ 326.125638][ T5186] bcm5974 4-1:1.0: could not read from device [ 326.139642][ T5186] bcm5974 4-1:1.0: could not read from device [ 326.149142][ T5948] usb 4-1: USB disconnect, device number 16 [ 326.180318][ T5186] bcm5974 4-1:1.0: could not read from device [ 326.297486][ T6618] netlink: 256 bytes leftover after parsing attributes in process `syz.4.175'. [ 326.620742][ T5948] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 326.663669][ T9] usb 3-1: Firmware version (0.0) predates our first public release. [ 326.688917][ T9] usb 3-1: Please update to version 0.2 or newer [ 326.744418][ T9] usb 3-1: USB disconnect, device number 23 [ 326.806723][ T5948] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 326.841147][ T5948] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 326.854104][ T5948] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 326.885432][ T5948] usb 5-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 326.900926][ T182] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 326.908983][ T5948] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.923384][ T5948] usb 5-1: config 0 descriptor?? [ 327.060531][ T182] usb 4-1: Using ep0 maxpacket: 32 [ 327.069773][ T182] usb 4-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 327.084417][ T5948] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 327.092313][ T182] usb 4-1: config 0 interface 0 has no altsetting 0 [ 327.099364][ T182] usb 4-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 327.110419][ T182] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.121716][ T182] usb 4-1: config 0 descriptor?? [ 327.142699][ T9] usb 5-1: USB disconnect, device number 4 [ 327.250433][ T5948] usb 1-1: Using ep0 maxpacket: 8 [ 327.258657][ T5948] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 327.267678][ T5948] usb 1-1: config 179 has no interface number 0 [ 327.275312][ T5948] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 327.301307][ T5948] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 327.328595][ T5948] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 327.341077][ T5948] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 327.356378][ T5948] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 327.375704][ T5948] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 327.385438][ T5948] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.416830][ T6631] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 327.429653][ T5948] xpad 1-1:179.65: probe with driver xpad failed with error -5 [ 327.439364][ T6640] binder: 6639:6640 ioctl c0306201 0 returned -14 [ 327.653373][ T5942] usb 1-1: USB disconnect, device number 35 [ 328.050159][ T5948] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 328.194414][ T182] usbhid 4-1:0.0: can't add hid device: -71 [ 328.204882][ T182] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 328.217137][ T5948] usb 5-1: New USB device found, idVendor=093a, idProduct=2601, bcdDevice= 8.8f [ 328.235283][ T5948] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.249010][ T182] usb 4-1: USB disconnect, device number 17 [ 328.264533][ T5948] usb 5-1: config 0 descriptor?? [ 328.287617][ T5948] gspca_main: pac7311-2.14.0 probing 093a:2601 [ 328.515671][ T5948] gspca_pac7311: reg_w() failed index 0x78, value 0x40, error -71 [ 328.541494][ T5948] pac7311 5-1:0.0: probe with driver pac7311 failed with error -71 [ 328.574639][ T5948] usb 5-1: USB disconnect, device number 5 [ 329.085469][ T6679] fuse: Unknown parameter 'N0x0000000000000004' [ 329.350991][ T5941] usb 4-1: new low-speed USB device number 18 using dummy_hcd [ 329.419273][ T6168] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 329.541998][ T5941] usb 4-1: config 9 has an invalid interface number: 1 but max is 0 [ 329.550728][ T5941] usb 4-1: config 9 has no interface number 0 [ 329.557047][ T5941] usb 4-1: config 9 interface 1 has no altsetting 0 [ 329.567050][ T5941] usb 4-1: string descriptor 0 read error: -22 [ 329.575779][ T5941] usb 4-1: New USB device found, idVendor=2040, idProduct=b140, bcdDevice=75.36 [ 329.582331][ T6168] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 329.586870][ T5941] usb 4-1: New USB device strings: Mfr=1, Product=130, SerialNumber=3 [ 329.599681][ T6168] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 255, setting to 64 [ 329.627712][ T6168] usb 5-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 329.644508][ T5941] cx231xx 4-1:9.1: New device @ 1.5 Mbps (2040:b140) with 1 interfaces [ 329.659293][ T5948] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 329.659539][ T5941] cx231xx 4-1:9.1: Not found matching IAD interface [ 329.670161][ T6168] usb 5-1: New USB device found, idVendor=046d, idProduct=ca04, bcdDevice= 0.00 [ 329.696604][ T6168] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.710276][ T6681] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 329.844503][ T182] usb 4-1: USB disconnect, device number 18 [ 329.856500][ T5948] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 329.876028][ T5948] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 329.886688][ T5948] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 329.900010][ T5948] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 329.911337][ T5948] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.926347][ T5948] usb 1-1: config 0 descriptor?? [ 330.125382][ T6681] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 330.138282][ T6681] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 330.169948][ T5948] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 330.552245][ T6703] kvm: Disabled LAPIC found during irq injection [ 330.976464][ T6721] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 330.983312][ T6721] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 330.994700][ T6721] vhci_hcd vhci_hcd.0: Device attached [ 331.002560][ T6723] vhci_hcd: connection closed [ 331.005407][ T3007] vhci_hcd vhci_hcd.2: stop threads [ 331.016769][ T3007] vhci_hcd vhci_hcd.2: release socket [ 331.022710][ T3007] vhci_hcd vhci_hcd.2: disconnect device [ 331.058595][ T24] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 331.221120][ T24] usb 4-1: unable to get BOS descriptor or descriptor too short [ 331.230287][ T24] usb 4-1: not running at top speed; connect to a high speed hub [ 331.240872][ T24] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 331.251838][ T24] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 331.267620][ T24] usb 4-1: string descriptor 0 read error: -22 [ 331.274930][ T24] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 331.285319][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.304558][ T24] usb 4-1: 0:2 : does not exist [ 331.513816][ T6714] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 331.536150][ T6714] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 331.768314][ T892] usb 1-1: reset high-speed USB device number 36 using dummy_hcd [ 331.858139][ T5942] usb 3-1: new full-speed USB device number 24 using dummy_hcd [ 331.952514][ T6714] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 331.961957][ T6714] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 332.031214][ T5942] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 332.044418][ T5942] usb 3-1: New USB device found, idVendor=055d, idProduct=9002, bcdDevice=23.5e [ 332.053693][ T5942] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.062421][ T5942] usb 3-1: Product: syz [ 332.067206][ T5942] usb 3-1: Manufacturer: syz [ 332.073085][ T5942] usb 3-1: SerialNumber: syz [ 332.084705][ T5942] usb 3-1: config 0 descriptor?? [ 332.191896][ T24] usb 4-1: 5:0: cannot get min/max values for control 2 (id 5) [ 332.206558][ T24] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 332.222274][ T24] usb 4-1: 5:0: failed to get current value for ch 1 (-22) [ 332.247363][ T6168] usbhid 5-1:4.0: can't add hid device: -71 [ 332.267955][ T6168] usbhid 5-1:4.0: probe with driver usbhid failed with error -71 [ 332.275604][ T24] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 332.292439][ T5942] usb 3-1: USB disconnect, device number 24 [ 332.307395][ T6168] usb 5-1: USB disconnect, device number 6 [ 332.358128][ T24] usb 4-1: USB disconnect, device number 19 [ 332.817599][ T6168] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 332.942240][ T6739] netlink: 40 bytes leftover after parsing attributes in process `syz.3.209'. [ 332.987605][ T6168] usb 5-1: Using ep0 maxpacket: 16 [ 332.998819][ T6168] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 333.010950][ T6168] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.040472][ T6168] usb 5-1: config 0 descriptor?? [ 333.069474][ T6168] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 333.248364][ T6168] usb 5-1: Detected FT232B [ 333.255773][ T6756] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 333.274768][ T6756] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 333.331517][ T5941] usb 1-1: USB disconnect, device number 36 [ 333.450508][ T6760] netlink: 763 bytes leftover after parsing attributes in process `syz.2.214'. [ 333.455117][ T6168] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 333.475932][ T5863] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 333.486627][ T5863] CPU: 0 UID: 0 PID: 5863 Comm: kworker/u9:2 Not tainted syzkaller #0 PREEMPT(full) [ 333.486659][ T5863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 333.486673][ T5863] Workqueue: hci1 hci_rx_work [ 333.486720][ T5863] Call Trace: [ 333.486730][ T5863] [ 333.486740][ T5863] dump_stack_lvl+0x189/0x250 [ 333.486768][ T5863] ? __pfx_dump_stack_lvl+0x10/0x10 [ 333.486789][ T5863] ? __pfx__printk+0x10/0x10 [ 333.486828][ T5863] ? kernfs_path_from_node+0x250/0x290 [ 333.486858][ T5863] ? kernfs_path_from_node+0x2f/0x290 [ 333.486893][ T5863] sysfs_create_dir_ns+0x259/0x280 [ 333.486926][ T5863] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 333.486958][ T5863] ? do_raw_spin_unlock+0x122/0x240 [ 333.486988][ T5863] kobject_add_internal+0x6ab/0xcc0 [ 333.487027][ T5863] kobject_add+0x155/0x220 [ 333.487061][ T5863] ? __pfx_kobject_add+0x10/0x10 [ 333.487095][ T5863] ? _raw_spin_unlock+0x28/0x50 [ 333.487121][ T5863] ? get_device_parent+0x366/0x3a0 [ 333.487155][ T5863] device_add+0x408/0xb80 [ 333.487188][ T5863] hci_conn_add_sysfs+0xd5/0x210 [ 333.487216][ T5863] le_conn_complete_evt+0xf1d/0x1420 [ 333.487259][ T5863] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 333.487289][ T5863] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 333.487316][ T5863] ? __asan_memcpy+0x40/0x70 [ 333.487350][ T5863] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 333.487375][ T5863] ? skb_pull_data+0xfb/0x200 [ 333.487420][ T5863] hci_le_conn_complete_evt+0x187/0x480 [ 333.487460][ T5863] hci_event_packet+0x78f/0x1260 [ 333.487515][ T5863] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 333.487549][ T5863] ? __pfx_hci_event_packet+0x10/0x10 [ 333.487577][ T5863] ? kcov_remote_start+0x4d3/0x7f0 [ 333.487601][ T5863] ? lockdep_hardirqs_on+0x98/0x140 [ 333.487629][ T5863] ? hci_send_to_monitor+0xe2/0x590 [ 333.487653][ T5863] hci_rx_work+0x3ee/0x1060 [ 333.487691][ T5863] ? process_one_work+0x868/0x15a0 [ 333.487719][ T5863] process_one_work+0x93a/0x15a0 [ 333.487773][ T5863] ? __pfx_process_one_work+0x10/0x10 [ 333.487812][ T5863] ? assign_work+0x3a1/0x410 [ 333.487847][ T5863] worker_thread+0x9b0/0xee0 [ 333.487906][ T5863] kthread+0x711/0x8a0 [ 333.487932][ T5863] ? __pfx_worker_thread+0x10/0x10 [ 333.487962][ T5863] ? __pfx_kthread+0x10/0x10 [ 333.487987][ T5863] ? _raw_spin_unlock_irq+0x23/0x50 [ 333.488010][ T5863] ? lockdep_hardirqs_on+0x98/0x140 [ 333.488049][ T5863] ? __pfx_kthread+0x10/0x10 [ 333.488074][ T5863] ret_from_fork+0x599/0xb30 [ 333.488107][ T5863] ? __pfx_ret_from_fork+0x10/0x10 [ 333.488148][ T5863] ? __switch_to_asm+0x39/0x70 [ 333.488170][ T5863] ? __switch_to_asm+0x33/0x70 [ 333.488191][ T5863] ? __pfx_kthread+0x10/0x10 [ 333.488214][ T5863] ret_from_fork_asm+0x1a/0x30 [ 333.488256][ T5863] [ 333.766678][ T5941] usb 1-1: new full-speed USB device number 37 using dummy_hcd [ 333.768894][ T5863] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 333.789380][ T5863] Bluetooth: hci1: failed to register connection device [ 333.798975][ T6168] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 333.809629][ T6168] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 333.813215][ T5863] ================================================================== [ 333.827712][ T5863] BUG: KASAN: slab-use-after-free in l2cap_connect_cfm+0x6d0/0x10e0 [ 333.837696][ T5863] Read of size 8 at addr ffff888022f45480 by task kworker/u9:2/5863 [ 333.846323][ T5863] [ 333.849144][ T5863] CPU: 1 UID: 0 PID: 5863 Comm: kworker/u9:2 Not tainted syzkaller #0 PREEMPT(full) [ 333.849171][ T5863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 333.849184][ T5863] Workqueue: hci1 hci_rx_work [ 333.849211][ T5863] Call Trace: [ 333.849221][ T5863] [ 333.849229][ T5863] dump_stack_lvl+0x189/0x250 [ 333.849247][ T5863] ? __kasan_check_byte+0x12/0x40 [ 333.849265][ T5863] ? __pfx_dump_stack_lvl+0x10/0x10 [ 333.849281][ T5863] ? lock_release+0x4b/0x3b0 [ 333.849308][ T5863] ? __virt_addr_valid+0x4a5/0x5c0 [ 333.849330][ T5863] print_report+0xca/0x240 [ 333.849350][ T5863] ? l2cap_connect_cfm+0x6d0/0x10e0 [ 333.849366][ T5863] kasan_report+0x118/0x150 [ 333.849382][ T5863] ? l2cap_connect_cfm+0x6d0/0x10e0 [ 333.849400][ T5863] l2cap_connect_cfm+0x6d0/0x10e0 [ 333.849420][ T5863] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 333.849439][ T5863] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 333.849454][ T5863] hci_connect_cfm+0x95/0x140 [ 333.849479][ T5863] le_conn_complete_evt+0xf65/0x1420 [ 333.849508][ T5863] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 333.849532][ T5863] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 333.849553][ T5863] ? __asan_memcpy+0x40/0x70 [ 333.849576][ T5863] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 333.849597][ T5863] ? skb_pull_data+0xfb/0x200 [ 333.849622][ T5863] hci_le_conn_complete_evt+0x187/0x480 [ 333.849649][ T5863] hci_event_packet+0x78f/0x1260 [ 333.849670][ T5863] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 333.849694][ T5863] ? __pfx_hci_event_packet+0x10/0x10 [ 333.849714][ T5863] ? kcov_remote_start+0x4d3/0x7f0 [ 333.849732][ T5863] ? lockdep_hardirqs_on+0x98/0x140 [ 333.849752][ T5863] ? hci_send_to_monitor+0xe2/0x590 [ 333.849768][ T5863] hci_rx_work+0x3ee/0x1060 [ 333.849792][ T5863] ? process_one_work+0x868/0x15a0 [ 333.849815][ T5863] process_one_work+0x93a/0x15a0 [ 333.849847][ T5863] ? __pfx_process_one_work+0x10/0x10 [ 333.849874][ T5863] ? assign_work+0x3a1/0x410 [ 333.849897][ T5863] worker_thread+0x9b0/0xee0 [ 333.849931][ T5863] kthread+0x711/0x8a0 [ 333.849950][ T5863] ? __pfx_worker_thread+0x10/0x10 [ 333.849973][ T5863] ? __pfx_kthread+0x10/0x10 [ 333.849991][ T5863] ? _raw_spin_unlock_irq+0x23/0x50 [ 333.850008][ T5863] ? lockdep_hardirqs_on+0x98/0x140 [ 333.850026][ T5863] ? __pfx_kthread+0x10/0x10 [ 333.850043][ T5863] ret_from_fork+0x599/0xb30 [ 333.850067][ T5863] ? __pfx_ret_from_fork+0x10/0x10 [ 333.850092][ T5863] ? __switch_to_asm+0x39/0x70 [ 333.850116][ T5863] ? __switch_to_asm+0x33/0x70 [ 333.850133][ T5863] ? __pfx_kthread+0x10/0x10 [ 333.850149][ T5863] ret_from_fork_asm+0x1a/0x30 [ 333.850174][ T5863] [ 333.850180][ T5863] [ 334.128470][ T5863] Allocated by task 5863: [ 334.133730][ T5863] kasan_save_track+0x3e/0x80 [ 334.139238][ T5863] __kasan_kmalloc+0x93/0xb0 [ 334.144056][ T5863] __kmalloc_cache_noprof+0x3e2/0x700 [ 334.149642][ T5863] l2cap_chan_create+0x51/0x790 [ 334.155119][ T5863] l2cap_sock_new_connection_cb+0x182/0x2e0 [ 334.161501][ T5863] l2cap_connect_cfm+0x367/0x10e0 [ 334.166907][ T5863] hci_connect_cfm+0x95/0x140 [ 334.171818][ T5863] le_conn_complete_evt+0xf65/0x1420 [ 334.177489][ T5863] hci_le_conn_complete_evt+0x187/0x480 [ 334.183518][ T5863] hci_event_packet+0x78f/0x1260 [ 334.188678][ T5863] hci_rx_work+0x3ee/0x1060 [ 334.193477][ T5863] process_one_work+0x93a/0x15a0 [ 334.199413][ T5863] worker_thread+0x9b0/0xee0 [ 334.204527][ T5863] kthread+0x711/0x8a0 [ 334.209039][ T5863] ret_from_fork+0x599/0xb30 [ 334.214284][ T5863] ret_from_fork_asm+0x1a/0x30 [ 334.219353][ T5863] [ 334.222026][ T5863] Freed by task 6759: [ 334.226543][ T5863] kasan_save_track+0x3e/0x80 [ 334.231345][ T5863] kasan_save_free_info+0x46/0x50 [ 334.236493][ T5863] __kasan_slab_free+0x5c/0x80 [ 334.241727][ T5863] kfree+0x1c0/0x660 [ 334.245679][ T5863] l2cap_sock_cleanup_listen+0xf0/0x450 [ 334.252060][ T5863] l2cap_sock_release+0x6a/0x230 [ 334.257387][ T5863] __sock_release+0xb9/0x250 [ 334.262453][ T5863] sock_close+0x1c/0x30 [ 334.267343][ T5863] __fput+0x44c/0xa70 [ 334.271561][ T5863] task_work_run+0x1d4/0x260 [ 334.276507][ T5863] exit_to_user_mode_loop+0xff/0x4f0 [ 334.282264][ T5863] do_syscall_64+0x2e3/0xf80 [ 334.287253][ T5863] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.293476][ T5863] [ 334.296463][ T5863] The buggy address belongs to the object at ffff888022f45000 [ 334.296463][ T5863] which belongs to the cache kmalloc-2k of size 2048 [ 334.312382][ T5863] The buggy address is located 1152 bytes inside of [ 334.312382][ T5863] freed 2048-byte region [ffff888022f45000, ffff888022f45800) [ 334.326820][ T5863] [ 334.329550][ T5863] The buggy address belongs to the physical page: [ 334.336374][ T5863] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x22f40 [ 334.345609][ T5863] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 334.355969][ T5863] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 334.363756][ T5863] page_type: f5(slab) [ 334.368550][ T5863] raw: 00fff00000000040 ffff88813fe27000 dead000000000100 dead000000000122 [ 334.378388][ T5863] raw: 0000000000000000 0000000080080008 00000000f5000000 0000000000000000 [ 334.387841][ T5863] head: 00fff00000000040 ffff88813fe27000 dead000000000100 dead000000000122 [ 334.397772][ T5863] head: 0000000000000000 0000000080080008 00000000f5000000 0000000000000000 [ 334.408931][ T5863] head: 00fff00000000003 ffffea00008bd001 00000000ffffffff 00000000ffffffff [ 334.418188][ T5863] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 334.427197][ T5863] page dumped because: kasan: bad access detected [ 334.433843][ T5863] page_owner tracks the page as allocated [ 334.440875][ T5863] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 24, tgid 24 (kworker/1:0), ts 282728414655, free_ts 282670079736 [ 334.463429][ T5863] post_alloc_hook+0x234/0x290 [ 334.468690][ T5863] get_page_from_freelist+0x2365/0x2440 [ 334.474792][ T5863] __alloc_frozen_pages_noprof+0x181/0x370 [ 334.480988][ T5863] alloc_pages_mpol+0x232/0x4a0 [ 334.485954][ T5863] allocate_slab+0x86/0x3b0 [ 334.490503][ T5863] ___slab_alloc+0xf2b/0x1960 [ 334.495653][ T5863] __slab_alloc+0x65/0x100 [ 334.500196][ T5863] __kmalloc_cache_noprof+0x41e/0x700 [ 334.505967][ T5863] wg_noise_handshake_begin_session+0xd5/0xbd0 [ 334.512772][ T5863] wg_packet_handshake_receive_worker+0x67a/0xfc0 [ 334.519701][ T5863] process_one_work+0x93a/0x15a0 [ 334.524782][ T5863] worker_thread+0x9b0/0xee0 [ 334.529404][ T5863] kthread+0x711/0x8a0 [ 334.533766][ T5863] ret_from_fork+0x599/0xb30 [ 334.538765][ T5863] ret_from_fork_asm+0x1a/0x30 [ 334.543825][ T5863] page last free pid 49 tgid 49 stack trace: [ 334.549828][ T5863] __free_frozen_pages+0xbc8/0xd30 [ 334.555069][ T5863] __put_partials+0x146/0x170 [ 334.560263][ T5863] put_cpu_partial+0x1f2/0x2d0 [ 334.566647][ T5863] __slab_free+0x288/0x2a0 [ 334.571510][ T5863] qlist_free_all+0x97/0x100 [ 334.577291][ T5863] kasan_quarantine_reduce+0x148/0x160 [ 334.583279][ T5863] __kasan_slab_alloc+0x22/0x80 [ 334.588800][ T5863] kmem_cache_alloc_node_noprof+0x43c/0x720 [ 334.595433][ T5863] __alloc_skb+0x255/0x430 [ 334.600756][ T5863] rtmsg_ifinfo_build_skb+0x84/0x260 [ 334.606608][ T5863] rtmsg_ifinfo+0x8c/0x1a0 [ 334.611357][ T5863] netif_state_change+0x289/0x380 [ 334.617541][ T5863] linkwatch_do_dev+0x124/0x180 [ 334.623081][ T5863] __linkwatch_run_queue+0x56a/0x7e0 [ 334.628968][ T5863] linkwatch_event+0x4c/0x60 [ 334.633897][ T5863] process_one_work+0x93a/0x15a0 [ 334.640263][ T5863] [ 334.642722][ T5863] Memory state around the buggy address: [ 334.648566][ T5863] ffff888022f45380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 334.657527][ T5863] ffff888022f45400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 334.666213][ T5863] >ffff888022f45480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 334.675321][ T5863] ^ [ 334.679852][ T5863] ffff888022f45500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 334.688495][ T5863] ffff888022f45580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 334.697393][ T5863] ================================================================== [ 334.730729][ T5863] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 334.739354][ T5863] CPU: 1 UID: 0 PID: 5863 Comm: kworker/u9:2 Not tainted syzkaller #0 PREEMPT(full) [ 334.750936][ T5863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 334.763045][ T5863] Workqueue: hci1 hci_rx_work [ 334.768562][ T5863] Call Trace: [ 334.772458][ T5863] [ 334.775779][ T5863] dump_stack_lvl+0x99/0x250 [ 334.780899][ T5863] ? __asan_memcpy+0x40/0x70 [ 334.788426][ T5863] ? __pfx_dump_stack_lvl+0x10/0x10 [ 334.794440][ T5863] ? __pfx__printk+0x10/0x10 [ 334.800666][ T5863] vpanic+0x237/0x6d0 [ 334.805059][ T5863] ? __pfx_vpanic+0x10/0x10 [ 334.811193][ T5863] ? preempt_schedule+0xae/0xc0 [ 334.816292][ T5863] ? __pfx_preempt_schedule+0x10/0x10 [ 334.821981][ T5863] panic+0xb9/0xc0 [ 334.825858][ T5863] ? __pfx_panic+0x10/0x10 [ 334.830840][ T5863] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 334.838279][ T5863] ? l2cap_connect_cfm+0x6d0/0x10e0 [ 334.844004][ T5863] check_panic_on_warn+0x89/0xb0 [ 334.850129][ T5863] ? l2cap_connect_cfm+0x6d0/0x10e0 [ 334.856089][ T5863] end_report+0x6f/0x140 [ 334.860734][ T5863] kasan_report+0x129/0x150 [ 334.866156][ T5863] ? l2cap_connect_cfm+0x6d0/0x10e0 [ 334.874704][ T5863] l2cap_connect_cfm+0x6d0/0x10e0 [ 334.882643][ T5863] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 334.889312][ T5863] ? __pfx_l2cap_connect_cfm+0x10/0x10 [ 334.895342][ T5863] hci_connect_cfm+0x95/0x140 [ 334.900856][ T5863] le_conn_complete_evt+0xf65/0x1420 [ 334.906793][ T5863] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 334.912769][ T5863] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 334.919166][ T5863] ? __asan_memcpy+0x40/0x70 [ 334.924500][ T5863] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 334.931333][ T5863] ? skb_pull_data+0xfb/0x200 [ 334.936166][ T5863] hci_le_conn_complete_evt+0x187/0x480 [ 334.942578][ T5863] hci_event_packet+0x78f/0x1260 [ 334.948550][ T5863] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 334.954240][ T5863] ? __pfx_hci_event_packet+0x10/0x10 [ 334.961187][ T5863] ? kcov_remote_start+0x4d3/0x7f0 [ 334.967083][ T5863] ? lockdep_hardirqs_on+0x98/0x140 [ 334.972946][ T5863] ? hci_send_to_monitor+0xe2/0x590 [ 334.978800][ T5863] hci_rx_work+0x3ee/0x1060 [ 334.983751][ T5863] ? process_one_work+0x868/0x15a0 [ 334.989532][ T5863] process_one_work+0x93a/0x15a0 [ 334.994787][ T5863] ? __pfx_process_one_work+0x10/0x10 [ 335.000550][ T5863] ? assign_work+0x3a1/0x410 [ 335.005996][ T5863] worker_thread+0x9b0/0xee0 [ 335.011108][ T5863] kthread+0x711/0x8a0 [ 335.015877][ T5863] ? __pfx_worker_thread+0x10/0x10 [ 335.021916][ T5863] ? __pfx_kthread+0x10/0x10 [ 335.027257][ T5863] ? _raw_spin_unlock_irq+0x23/0x50 [ 335.033661][ T5863] ? lockdep_hardirqs_on+0x98/0x140 [ 335.039440][ T5863] ? __pfx_kthread+0x10/0x10 [ 335.045696][ T5863] ret_from_fork+0x599/0xb30 [ 335.051574][ T5863] ? __pfx_ret_from_fork+0x10/0x10 [ 335.058816][ T5863] ? __switch_to_asm+0x39/0x70 [ 335.064591][ T5863] ? __switch_to_asm+0x33/0x70 [ 335.069943][ T5863] ? __pfx_kthread+0x10/0x10 [ 335.075346][ T5863] ret_from_fork_asm+0x1a/0x30 [ 335.081425][ T5863] [ 335.085552][ T5863] Kernel Offset: disabled [ 335.090556][ T5863] Rebooting in 86400 seconds..